Decisions & Disruptions (D&D): A Cyber-Physical Systems Game for Studying Security Decisions

Add to your list(s) Download to your calendar using vCal

• Sylvain Frey (University of Lancaster)
• Thursday 06 October 2016, 11:00-12:00
• Sloman Lounge, School of Computer Science.

If you have a question about this talk, please contact Andreea Radu.

Decisions & Disruptions (D&D) is a tabletop / role playing game about security in industrial control systems. D&D players are tasked with managing the security of a small utility company: they are given a budget that they can spend among different defensive options. Decisions have to be made, taking into account a number of potential threats, known vulnerabilities of the infrastructure, past and ongoing cyber attacks, and of course budget limitations.

In this talk, I will present D&D and discuss its use to study security decisions. Security decisions are a key element of any organisation’s defensive setup, yet little is currently understood about how security decisions are made: what is the underlying process? Are there any measurable decision patterns or biases? Do they influence decisions positively or negatively? I will discuss how playing D&D and studying player decisions provides answers to these questions.

This talk is part of the Computer Security Seminars series.

This talk is included in these lists:

• Computer Science Departmental Series
• Computer Science Distinguished Seminars
• Computer Security Seminars
• Sloman Lounge, School of Computer Science
• computer sience

Note that ex-directory lists are not shown.