
Background information
Tron: Catalyst preview – how the new Tron game feels to play
by Philipp Rüegg
The Lucerne University of Applied Sciences and Arts has developed a free browser game to better prepare company employees for possible cyber attacks. But how exactly does it work?
Cyber crime is constantly on the rise. Again and again, we hear about ransomware or cyber attacks on companies. We also report on them. Most often, it’s human error that allows criminals to gain unauthorised access to corporate data.
In collaboration with Fabula Games, the Lucerne University of Applied Sciences and Arts (HSLU) has therefore set themselves the goal of raising awareness of this among company employees. So they’ve developed an online game. It’s available on the information platform of «eBanking - but secure!» and free of charge. I took a peek at the amusing educational game.
You start the game as a buyer for Schmitt & Schmitz Imported Goods GmbH. It’s 6 p.m. and all your team members have already clocked off. But you just have to do something and complete your daily tasks. You have to finish purchasing a component. In the process, you click through a few e-mails and catch an «infected» attachment.
Now it’s your turn. How do you react in this situation? The game presents you with a number of decisions that you must successfully overcome. At the end of the game, you’ll receive a personal evaluation of your behaviour, as well as further information on how to protect yourself from hacker attacks.
The game is to be understood as educational software and is good for awareness campaigns in companies. «The biggest gateway in ransomware attacks are humans. And we have to start there», explains Oliver Hirschi, lecturer at the Department of Computer Science at HSLU and co-developer of the game. A link in a supposedly trustworthy e-mail is often clicked too quickly or the attachment is opened. Hirschi is therefore certain: «These attacks are very professionally organised nowadays – detecting them is becoming increasingly challenging. That’s why better awareness and training for employees is needed.»