Skip to main content
SpringerLink
Log in

Experiential Learning or Direct Training: Fostering Ethical Cybersecurity Decision-Making via Serious Games

  • Conference paper
  • First Online:
Persuasive Technology (PERSUASIVE 2024)

Part of the book series: Lecture Notes in Computer Science ((LNCS,volume 14636))

Included in the following conference series:

  • 104 Accesses

Abstract

Achieving secure cybersecurity systems requires a dual focus on technological aspects and human factors, both of which raise questions around ethical decision-making. While the objective is to ensure the comprehensive security of cybersecurity solutions, overlooking the ethical implications of decisions can lead to unexpected as well as unethical outcomes, giving rise to concerns aligned with basic ethical principles such as achieving benefits, avoiding harm, respecting choice, fairness, and transparency. To tackle this challenge, we have developed a serious game to educate cybersecurity participants to be mindful of the consequences of their decisions. All participants in our study engaged in experiential learning by discussing ethical dilemmas with non-player characters (NPCs) in this game. Additionally, half of our participants (training group) received explicit training in five ethical principles and undertook reflective activities. The control group did not receive this explicit training. We aimed to investigate whether experiential learning is adequate or whether additional explicit training in ethics is needed in this context. Analysis of pre- and post-tests revealed that both the training and control groups significantly improved their ability to recognise the importance of ethics after playing the game. The control group, receiving no direct training, performed equally as well as the training group in ethical decision-making. In analysing what made the ethical training effective, participants reported that virtual team discussions and choice/decision events were the most influential. The game will be further enhanced and evaluated in a future study.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Institutional subscriptions

References

  1. Park, S., Lim, J., Kim, D.: The human factor of cybersecurity and the prevention and counter measures against cybercrime in South Korea. Webology (ISSN 1735-188X) 19 (2022)

    Google Scholar 

  2. Langner, G., Furnell, S., Quirchmayr, G., Skopik, F.: A comprehensive design framework for multi-disciplinary cyber security education. In: Furnell, S., Clarke, N. (eds.) HAISA 2023. IFIP (AICT), vol. 674, pp. 105–115. Springer, Cham (2023). https://doi.org/10.1007/978-3-031-38530-8_9

    Chapter  Google Scholar 

  3. Blanken-Webb, J., Palmer, I., Deshaies, S.-E., Burbules, N.C., Campbell, R.H., Bashir, M.: A case study-based cybersecurity ethics curriculum. In: 2018 USENIX Workshop on Advances in Security Education (ASE 18) (2018)

    Google Scholar 

  4. Jamal, A., Ferdoos, A., Zaman, M., Hussain, M.: Cyber-ethics and the perceptions of Internet users: a case study of university students of Islamabad. Pakistan J. Inf. Manag. Libr. 16 (2015)

    Google Scholar 

  5. Hodhod, R., Kudenko, D., Cairns, P.: Serious games to teach ethics. In: The Society for the Study of Artificial Intelligence and Simulation of Behaviour Convention, pp. 43–52 (Adaptive and Emergent Behaviour and Complex Systems 2009)

    Google Scholar 

  6. Ryan, M., Staines, D., Formosa, P.: Focus, sensitivity, judgement, action: four lenses for designing morally engaging games. Trans. Digit. Games Res. Assoc. 2 (2017)

    Google Scholar 

  7. Aura, I., Hassan, L., Hamari, J.: Gameful civic education: a systematic literature review of empirical research. In: Proceedings of the 6th International GamiFIN Conference 2022 (GamiFIN 2022) (2022)

    Google Scholar 

  8. Westera, W.: Why and how serious games can become far more effective: accommodating productive learning experiences, learner motivation and the monitoring of learning gains. J. Educ. Technol. Soc. 22, 59–69 (2019)

    Google Scholar 

  9. Luthar, H.K., Karri, R.: Exposure to ethics education and the perception of linkage between organizational ethical behavior and business outcomes. J. Bus. Ethics 61, 353–368 (2005). https://doi.org/10.1007/s10551-005-1548-7

    Article  Google Scholar 

  10. Cagle, J.A.B., Baucus, M.S.: Case studies of ethics scandals: effects on ethical perceptions of finance students. J. Bus. Ethics 64, 213–229 (2006). https://doi.org/10.1007/s10551-005-8503-5

    Article  Google Scholar 

  11. Gino, F., Ayal, S., Ariely, D.: Contagion and differentiation in unethical behavior: the effect of one bad apple on the barrel. Psychol. Sci. 20, 393–398 (2009). https://doi.org/10.1111/j.1467-9280.2009.02306.x

    Article  Google Scholar 

  12. Whitty, M., Doodson, J., Creese, S., Hodges, D.: Individual differences in cyber security behaviors: an examination of who is sharing passwords. Cyberpsychol. Behav. Soc. Netw. 18, 3–7 (2015). https://doi.org/10.1089/cyber.2014.0179

    Article  Google Scholar 

  13. Kozhuharova, D., Kirov, A., Al-Shargabi, Z.: Ethics in cybersecurity. what are the challenges we need to be aware of and how to handle them? In: Cybersecurity of Digital Service Chains: Challenges, Methodologies, and Tools, pp. 202–221 (2022)

    Google Scholar 

  14. Treviño, L.K., Weaver, G.R., Reynolds, S.J.: Behavioral ethics in organizations: a review. J. Manag. 32, 951–990 (2006). https://doi.org/10.1177/0149206306294258

    Article  Google Scholar 

  15. Gee, J.P.: What video games have to teach us about learning and literacy. Comput. Entertain. (CIE) 1 (2003)

    Google Scholar 

  16. Gee, J.P.: Learning by design: good video games as learning machines. E-Learn. Digit. Media 2, 5–16 (2005). https://doi.org/10.2304/elea.2005.2.1.5

  17. Hauge, J.M.B., Pourabdollahian, B., Riedel, J.C.K.H.: The use of serious games in the education of engineers. In: Emmanouilidis, C., Taisch, M., Kiritsis, D. (eds.) APMS 2012. IAICT, vol. 397, pp. 622–629. Springer, Heidelberg (2013). https://doi.org/10.1007/978-3-642-40352-1_78

    Chapter  Google Scholar 

  18. Kolbe, D.A.: Experiential learning. New Jersey, Eaglewood Cliffs (1984)

    Google Scholar 

  19. Remington, T.F., Chou, P., Topa, B.: Experiential learning through STEM: recent initiatives in the United States. Int. J. Train. Dev. (2023)

    Google Scholar 

  20. Rege, A., Williams, K., Mendlein, A.: An experiential learning cybersecurity project for multiple STEM undergraduates. In: 2019 IEEE Integrated STEM Education Conference (ISEC), pp. 169–176 (2019). https://doi.org/10.1109/ISECon.2019.8882112

  21. Roshni, M., Rahim, A.: Small group discussions as an effective teaching-learning methodology for learning the principles of family medicine among 2(nd)-year MBBS students. J Family Med. Prim. Care 9, 2248–2252 (2020). https://doi.org/10.4103/jfmpc.jfmpc_1228_19

    Article  Google Scholar 

  22. Maudsley, G., Strivens, J.: Promoting professional knowledge, experiential learning and critical thinking for medical students. Med. Educ. 34, 535–544 (2000)

    Article  Google Scholar 

  23. Sansare, V., Ryan, M., McEwan, M.: Oscillatory Design to Develop Moral Engagement Through Systemic Play (2023)

    Google Scholar 

  24. Formosa, P., Wilson, M., Richards, D.: A principlist framework for cybersecurity ethics. Comput. Secur. 109 (2021). https://doi.org/10.1016/j.cose.2021.102382

  25. Sadeghi, B., et al.: Modelling the ethical priorities influencing decision-making in cybersecurity contexts. Organ. Cybersecur. J.: Pract. Process People 3, 127–149 (2023). https://doi.org/10.1108/OCJ-09-2022-0015

    Article  Google Scholar 

  26. Stanton, J.M., Stam, K.R., Mastrangelo, P., Jolton, J.: Analysis of end user security behaviors. Comput. Secur. 24, 124–133 (2005). https://doi.org/10.1016/j.cose.2004.07.001

  27. Jones, T.M.: Ethical decision making by individuals in organizations: an issue-contingent model. Acad. Manag. Rev. 16, 366–395 (1991). https://doi.org/10.5465/amr.1991.4278958

    Article  Google Scholar 

  28. Sadeghi, B., Richards, D., Formosa, P., McEwan, M., Hitchens, M.: How to increase ethical awareness in cybersecurity decision making. In: ACIS 2022, pp. 1–11 (2022)

    Google Scholar 

  29. Ryan, M., McEwan, M., Sansare, V., Formosa, P., Richards, D., Hitchens, M.: Design of a serious game for cybersecurity ethics training. In: DiGRA 22, pp. 1–18. Digital Games Research Association (2022)

    Google Scholar 

  30. Norman, G.: Likert scales, levels of measurement and the “laws” of statistics. Adv. Health Sci. Educ. 15, 625–632 (2010). https://doi.org/10.1007/s10459-010-9222-y

    Article  Google Scholar 

  31. Gosling, S.D., Rentfrow, P.J., Swann, W.B.: A very brief measure of the Big-Five personality domains. J. Res. Pers. 37, 504–528 (2003). https://doi.org/10.1016/s0092-6566(03)00046-1

    Article  Google Scholar 

  32. Ryan, R.M., Rigby, C.S., Przybylski, A.: The motivational pull of video games: a self-determination theory approach. Motiv. Emot. 30, 344–360 (2006). https://doi.org/10.1007/s11031-006-9051-8

    Article  Google Scholar 

Download references

Acknowledgments

This study was supported by Australian Research Council DP20010213.

Author information

Authors and Affiliations

  1. School of Computing, Macquarie University, Sydney, Australia

    Bakhtiar Sadeghi, Deborah Richards & Michael Hitchens

  2. Department of Philosophy, Macquarie University, Sydney, Australia

    Paul Formosa

Authors
  1. Bakhtiar Sadeghi
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Deborah Richards
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Paul Formosa
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Michael Hitchens
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Bakhtiar Sadeghi .

Editor information

Editors and Affiliations

  1. The University of Queensland, St Lucia, QLD, Australia

    Nilufar Baghaei

  2. Hamad Bin Khalifa University, Doha, Qatar

    Raian Ali

  3. University of Wollongong, Wollongong, NSW, Australia

    Khin Win

  4. York University, Toronto, ON, Canada

    Kiemute Oyibo

Rights and permissions

Reprints and permissions

Copyright information

© 2024 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Sadeghi, B., Richards, D., Formosa, P., Hitchens, M. (2024). Experiential Learning or Direct Training: Fostering Ethical Cybersecurity Decision-Making via Serious Games. In: Baghaei, N., Ali, R., Win, K., Oyibo, K. (eds) Persuasive Technology. PERSUASIVE 2024. Lecture Notes in Computer Science, vol 14636. Springer, Cham. https://doi.org/10.1007/978-3-031-58226-4_20

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-58226-4_20

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-58225-7

  • Online ISBN: 978-3-031-58226-4

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation