Upload File

gamificationusing “science of habit cycle” to transform ... · using gamification in security...

  • Home
  • Documents
  • GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic
43
SESSION ID: SESSION ID: #RSAC Bikash Barai Gamification Using “Science of Habit Cycle” to Transform User Behavior HUM-R10F Co-founder, FireCompass Twitter: @bikashbarai1

Upload: truongthu

Post on 02-Dec-2018

215 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

SESSIONID:SESSIONID:

#RSAC

Bikash Barai

Gamification Using“ScienceofHabitCycle”toTransformUserBehavior

HUM-R10F

Co-founder,FireCompassTwitter:@bikashbarai1

Page 2: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

TheProblemWithAwarenessProgram…

Graph:Continuedsecuritytrainingbeyondthebaselineareunlikelytobeeffective- “ModifyingSmartphoneUserLockingBehavior”– byDirketal(ACM– 2013)

Awareness

ChangeinBeh

avior

Credit:Abd AllahFoteih

Page 3: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

BeforeGamification…Games&Reality

Page 4: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

WhenMichaelPhelpsGotBlindedatOlympics

Page 5: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

TetrisEffect….&Auditor’sMisery

Image:Wikimedia

TetrisEffect….AndAuditor’sMisery

Page 6: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

So,HowCanWeTrainOurNeuralSpamFilter?

Page 7: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Now…Let’sTalkAboutGamification

7

Applicationofgame-likemechanicstonon-gameentitiestoencourageaspecificbehavior.

Whatitisnot?Itisnotagame

Page 8: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Foldit:15YearsVs10Days!

Image:Wikimedia

Page 9: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

PainSquad

Page 10: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

LoyaltyRewardsProgram

Image:Wiki

Page 11: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

BuildingBlocksforGamification

Page 12: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Image:Pixabay/Wikipedia

No..That’sNotEnough

Points,BadgesandLeaderboards…

Page 13: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

GoodGamification startswithHumanDesires

Page 14: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSACWhatHappenedWhenPeopleWerePaidToDonateBlood?

Image:Pixabay

Page 15: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

HumanMotivationandGaming

Gamification MotivatorsAutonomyMasteryPurpose/MeaningRewardsStatusRelationshipsPeerPressureAvoidance/LossScarcity

MartinSeligman/PERMA(PositivePsychology)

PositiveEmotionEngagementRelationshipsMeaningAccomplishment

DanielPinkAutonomyMasteryPurpose

Page 16: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

UnderstandingFlow

Image:Wikimedia

Page 17: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

UsingGamification inSecurity

17

Gamification isrelativelynewandisbeingrecentlytriedoutinsecurity

BasicprocessIdentifyGoalsDefineRulesDefineRewards

Itworksbetterthantheposteronyourofficewall..forsure

Page 18: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

YouCanDoBetter…WhatifITold…

https://www.flickr.com/photos/snaps_at_aquastuff/3777104375

Page 19: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

TheMysteryofEugenePauly’s Brain..

19

Dr.Lary R.SquireUniversityofCalifornia,SanDiego

ImageSource:http://whoville.ucsd.edu/about.html

Page 20: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

GoalDirectedSystem(Pre-FrontalCortex)ResponsibleforneworinfrequentbehaviorsGuidedbyattitudes,goals,values,knowledgeConsciousanddeliberateSlow

HabitSystem(BasalGanglia)Veryfast.DoesnotrequirethoughtorattentionLessconscious.Moreautomatic

GoalDirectedandHabitSystem

20Credit:Nealetal– TheScienceofHabit…

Page 21: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

HowToBuildANewHabit?

Page 22: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

TheStoryOf..

Page 23: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

HabitCycle:Trigger– Routine– Reward

23

Trigger:FeelToothFilmwith

tongue

Routine:BrushingTeeth

Reward:GreatSmile

CraveforTingling

ImageCredit:SethLemmonsImageCredit:Wikipediahttps://i.ytimg.com/vi/rf1Bs2XpwFI/maxresdefault.jpg

Page 24: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

HowToChangeAHabit?

Page 25: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

25

Old HabitsNever Die

Page 26: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Example– ChangingAHabit

26

Trigger:Boredom

Routine:HaveaWhisky

Reward:FeelHappy

ImageCredit:Wiki

Page 27: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Example– ChangingAHabit

27

Trigger:Boredom

Routine:HaveaWhisky

Reward:FeelHappy

ImageCredit:Wiki

Page 28: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSACChangingtheHabitofWritingDownPasswordinOpenAreas

Goal:StopthehabitofwritingdownpasswordareasTrigger – NewpasswordsettingrequestOldRoutine– writedownthepasswordNewRoutine– “writedowntheclue”or“UseaSchemetogeneratenewpasswords”Reward– Feelingofsecurity

RehearseorRepeat

Page 29: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

IntroducingHabit-CentricGamification

Page 30: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

4PrinciplesOfHabit-CentricGamification

FocusonBuildingHabitCycle

RewardActionsTiedToTriggers&NotAllPositiveAction

RewardSuccessivePositiveActions

PenalizeifChainOfPositiveActionsIsBroken

Page 31: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Example:NormalVsHabit-CentricGamification

NormalGamificationRewardeverytimeonegoesjogging/attendsasecuritylesson

Habit-CentricGamificationRewardeverytimeonejogsrightafterwakingup/attendsaweeklysecuritylesson

PenalizeifchainofpositivebehaviorisbrokenORNon-linearbenefitforbuildinglongerchainofsuccess

31

Page 32: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Changingcodinghabits

32

Trigger:Needtotypea

function

Routine:Typeinsecurefunction

Reward:Senseoftaskcompletion

ImageCredit:Wiki

Page 33: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Changingcodinghabits

33

Trigger:Needtotypea

function

Routine:Typesecurefunction(Useintervention)

Reward:Senseoftaskcompletion

ImageCredit:Wiki

Page 34: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Gamify SecureCoding

GamemechanismfortrainingWeeklyfixeddaysecurecodingtraining– 10pointsEachsuccessfulstreakof5weeks– Additional100pointsEverymiss– Chainbreaks

GamemechanismforsecurecodingRealtime feedbackusingautomatedtoolsEverysuccess:1pointEverystreakof20success:Additional100pointsEverymiss– Chainbreaks

Page 35: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Gamify SecureCoding

Motivation/RewardsPurpose/meaningIntrinsicRewards:—Mastery,Selfdevelopment,Progress

Points/Badges/LeaderboardExtrinsicRewards:Tshirts,Couponsetcfortopperformers

Page 36: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Gamify PhishingAwareness

Let’sdoittogether!

HabitLoopTrigger– Routine– Reward

GameMechanics

Page 37: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

ApplyWhatYouLearned

Page 38: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

ApplyWhatYouLearned

TryitoutonyourselfChoose1habitthatyouwanttochangeorbuildGamify itwithHCGprinciples

NextWeek

Page 39: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

ApplyWhatYouLearned(Contd..)

First3monthsWorkon1-2habitswithasmallgroupofvolunteersGamify.Utilizedrills(20to30repetitionsforeachhabit).CreateothermonitoringmechanismsoutsideofdrillsGiveRewards.Measurethesuccessoftheprogram

After6monthsFindthemostimportanthabitstochangeinyourorganizationCreateanorganizationwideplanforgamification

39

Page 40: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

1.AwarenessIsNotEnough

40

2.LeverageHabit-Cycle3.Gamify BuildingSecureHabit-Cycle

Page 41: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

OneLastStory..TheCobraEffect

Page 42: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

WantToEngineerAHabit?

42

Let’sMeetAtTheBar..

Page 43: GamificationUsing “Science of Habit Cycle” to Transform ... · Using Gamification in Security 17 Gamification is relatively new and is being recently tried out in security Basic

#RSAC

Questionsplease..

[email protected]

@bikashbarai1

43

Bikash Barai


Gamification for security

habit 2 and habit 5 -BY STEPHEN R. COVEY

[Cluj] Information Security Through Gamification

Using Habit for Good - Nir Eyal, 2016 Habit Summit

Gamification to Empower Information Security Education · 2017. 12. 19. · Gamification to Empower Information Security Education. AlessandraAntonaci Page 2 Outline ... • Gamification’s

Gamification Presentatie van Gamification Spreker Rutger Teunissen

CaseReport Habit Breaking Appliance for Multiple Corrections · Habit Breaking Appliance for Multiple Corrections ... removable habit breaking appliances [15, 16]. Hence, habit breaking

Food security through food habit change as an adaptation ...€¦ · Food security through food habit change as an adaptation process to climate change *Dr Masum A Patwary 1, 2, Email:

Gamification: Psychology Inside (Gamification World Congress 2014)

About gamification - Information Security Training · About gamification 'The use of design elements characteristic for games in non-game contexts' Take away from e-learning and board

Chapter 1 Gamifi-wha? Introducing Gamification COPYRIGHTED ... · Gamification In This Chapter Defining gamification and seeing what it does Answering the question: Does gamification

GAMES AND GAMIFICATION - Center for Advanced Hindsight...SOFT GAMIFICATION VERSUS HARD GAMIFICATION. Note that this definition does not say that gamification is the transformation

Daily Habit Tracker - Degreed.com Campaign/Degreed-Habit-Tracke… · Daily Habit Tracker Make Learning a Habit Month JAN FEB MAR APR MAY JUN JUL AUG SEP OCT NOV DEC Habit Notes 1

Gamification of your Global Information Security Operations Center - RSA 2015

K. glauca L. nivea · L. nivea Habit Color Low Habit Green Low Habit Green Low Habit Green Low Habit Brown Low Habit Green Height Spread 6 to 8 inches 18 to 20 inches 6 to 8 inches

LEADERSHIP HABIT FOR THE FORTNIGHT Habit 2

Gamification of Security Awareness: Escape Rooms...Gamification of Security Awareness: Escape Rooms Presented by Jamie Turner and David Luna of Texas Workforce Commission Who we are

Gamification Quo Vadis - Präsentation zum Gamification Day Köln 2014

AddedSugar: HowtoKickthe$ Habit - Playhouse Square HowtoKickthe$ Habit ... Caffeine’Overdose’Kills’Teen ... Replacing’sugar’with’artificial’is’similar’to

CENTER STAGE FABRICS - Brunswick Bowling€¦ · Habi Aspen Habit lueprint Habi une Habit indle Habit ier Habit Salt Habit Tailor GRADE 1. CENTER STAGE FABRICS Color r pproximat epresentation

Gamification 101: Learn the Basics of Gamification Strategy

Gamification of Security: Making Security a Game. Spencer Wilcox, CISSP, CPP, SSCP @ brasscount

Mobile Social Gamification & Gamification Y

Cyber Security Awareness Via Gamification: Lessons from ...Many cyber security games have been developed to help improve peoples’ security awareness [2,5,4,7,3,1,6]. In this poster

Gamification Using a Choose-Your-Own-Adventure …...toward gamification grows, instructors need examples and options of empirically tested, successful gamification methods. Some gamification

Workshop Gamification. Doel workshop Inzicht gamification Toepassen van gamification voor eigen module

Capita Selecta Gamification Margot van Trier - geauw.nl Selecta Gamification Margot van Trier.pdf · Margot!van!Trier!=!Gamification!2! Voorwoord De keuze voor Gamification, het onderwerp

LEADERSHIP HABIT FOR THE FORTNIGHT Habit 3 - Put First

Gamification for IT Security Training and Awareness Programs...• Gamification has always existed, it works and is here to stay, especially with the largest generation: Millennials

Use of Gamification in Security Awareness and Training ... · Use of Gamification in Security Awareness and Training Programs Eyvind Garder B Gjertsen Master of Science in Communication

Gamification of Security: Making Security a Game. Spencer Wilcox, CISSP, CPP, SSCP @brasscount Find this presentation at: Securiplay.com

GAMIFICATION - Ludicizzazione –. COSE LA GAMIFICATION

Gamification

Success by habit habit of success

Using Gamification for Cyber Exercises and Security Competence Building · 2018-10-05 · ITU Cyberdrill, 4-5 Oct 2018 Grand-Bassam, Côte d’Ivoire Using Gamification for Cyber