Play, Learn, Secure: The Power of Gamification in Security Training
summary
Monthly compliance modules feel boring so replace them with hands‑on events: a pentest day initiative runs a full day of planted vulnerabilities that engineers find with hints, boosting cross‑team talk and remedial fixes; Capture the Flag (CTF learn) and OWASP Juice Shop provide repeatable challenges for code and web flaws; a points/badge bounty (e.g. 50–100 points redeemable for rewards) drives participation. Success shows as higher engagement, peer teaching, and measurable score gains in post‑event quizzes and manager feedback.
AI-written summary · about
chapters (8)
- 0:00Introduction to gamification
- 1:26Problems with traditional training
- 2:30Gamification approaches in security
- 5:47Company examples of gamified training
- 9:04Key elements of gamification
- 11:12Benefits of gamified training
- 13:21Open-source gamification tools
- 16:55Measuring success of training
related talks
41mGamifying Developer Education with CTFs
30mSecurity by Stealth
30mHackers Going to Hack
28mBreaking Barriers The Art of Free Gamified Security Training
23mGrowing Your Skillset with Capture the Flag
54mWant to Play a Game? Get Your Game On with Hacking Gamification
31mA Dancefloor that is Literally Just Banana Peels – AppSec Awareness Program Pitfalls
20mHow to Use Your Vulnerabilities to Train Your Developers on Security