A Preliminary Concept on Cybersecurity Skill Training Framework for a Capture-the-Flag Game using 5-Step Gamification Approach

Abstract

This paper discusses about how to design a teaching and learning (T&L) framework for cyber security using game at higher education in Malaysia. The paper begins with literature review of key concepts and issues associated with Capture the Flag (CTF) and cybersecurity education framework, which led to the process of defining the CTF game to support the research aims. A version of CTF game was created using an open-source engine through Technology Pedagogy and Content Knowledge (TPACK) framework and five-step gamification approach, which was aligned to the course structure of cyber security courses offered in two institutions of higher education in Malaysia. The intended learning outcomes of the course were mapped into the CTF game features. The constructive alignment and the CTF game were then verified by subject matter experts. Pre and post-test are conducted to study the difference in students’ performance. Mixed-mode research approach with quasi experiment will be used to study the difference among the treatment group. Data collection and analysis require supplement from follow-up interviews in order to complete the analysis of this T&L framework.