A cyber investion game

simulSecure

Han Nguyen - Luan Truong

Introduction

In today's world, where technology is everywhere, the fight against cybercrime is getting more intense. Cybercriminals are constantly finding new ways to attack, and we need skilled cyber investigators to defend against them. SimulSecure is not just any game; it is a fun and educational experience that helps people learn how to deal with real-world cyber threats.

As cyberattacks become more serious, it is crucial to prepare the next generation of cybersecurity experts with the right skills to protect our digital world. This project responds to the need for better ways to train people in cybersecurity. Traditional methods often don't keep up with the fast-paced world of cyber threats. SimulSecure is here to change that by offering a hands-on, interactive, and game-based way to learn

Phase 1 - Feasibility study

Economic feasibility

Assess by estimating development costs, including hardware, software, personnel, and other expenses, and comparing them to expected benefits and revenue generation.

Development cost estimated at 80,000 CAD over 16 months with a team of 5.

Phase 1 - Feasibility study

time feasibility

Evaluates whether the project can be completed within the allocated timeframe, considering the development schedule, milestones, and deadlines.

8 months of development until early access release (2 academic semesters).

Phase 1 - Feasibility study

Technical feasibility

Provides an overview of hardware, software, and technical requirements.

Programming in C# and Python, version control using GitHub or PlasticSCM, project management with Codecks or Jira, and various tools for artists.

Phase 1 - Feasibility study

Operational feasibility

Assesses the practicality of implementing and maintaining SimulSecure after completion.

Smooth integration into existing operations, availability of resources and skills, scalability for future needs, sustainable support and compliance, and minimal disruption during implementation.

Phase 1

Feasibility REPORT

Insights from feasibility study types (Economic, Time, Technical, Operational) & PIECES Framework

Economic Feasibility

Cost estimation: 480,000 CAD for 16 months ~ 2 years with a team of 10.

TIME Feasibility

12 weeks for prototype, 4 months for early access, Ongoing patches over 12 months

Technical Feasibility

Programming languages (C#), tools (Unity, lender), third-party subscriptions (Jira, CSP, AWS), OS and hardware requirements.

Operational Feasibility

Integration into existing operations.

Scalability and sustainability.

Phase 1

Feasibility Justification

Insights from feasibility study types (Economic, Time, Technical, Operational)

Economic Feasibility

Covers tool acquisition, team hiring (10 members), and project-related expenses.

TIME Feasibility

Aligns with industry standards, ensuring timely delivery and

Technical Feasibility

Relies on open-source tools, industry standards, and well-documented platforms.

Operational Feasibility

Successful integration examples (e.g., Fortnite), 20% growth in cybersecurity professionals, scalability, and alignment with industry standards.

• Price: $480,000 (2000 CAD/month/person - mostly part-time students)
  
• Time: 2 years
  
• Tools Used: Mixamo, Clip Studio Paint, Procreate, Unity, Blender, Figma, JIRA, Microsoft Visual Studio, VSC, PlasticSCM
  
• Operating Systems: Windows 10-11, MacOS
  
• Hardware: Computer, Drawing Tablet, iPad
  
• Functionality: Interactive learning and problem-solving with cybersecurity knowledge, using keyboard and mouse to engage with characters and tools
  
• Performance: Page load time <1sec
  
• Payment Details: Advance 20%, every phase 20%
  
• Maintenance: 1-year maintenance
  

Project Sign-off

• Luan Truong, Customer Sign
• Han Nguyen, System Analyst Sign

Phase 1: Requirement Elicitation

Definition

• Requirement elicitation is the systematic process of identifying and gathering specific needs, expectations, and objectives of stakeholders for SimulSecure.
  
• Stakeholders include potential users, educators, and cybersecurity experts.
  
• Informs the game's design, features, and content to address real-world cyber threats and align with dynamic cybersecurity demands.
  

Importance

• Critical for the project's innovative approach in the cybersecurity domain.
  
• Ensures SimulSecure effectively meets learning objectives, user expectations, and cybersecurity demands.
  

Phase 1:

Requirement Elicitation Techniques

Known Requirements:

• Interviewing: One-on-one/group discussions to extract explicit requirements and insights.
  
• Questionnaire: Structured surveys for specific information from stakeholders.
  
• Observation: Directly observing user behavior and needs in relevant contexts.
  
• Surveys: Broad data collection efforts for preferences, opinions, and requirements.
  
• JAD (Joint Application Development): Collaborative workshops to define requirements and streamline project understanding.
  

Unknown Requirements:

• QFD (Quality Function Deployment):
  
• Systematic translation of customer needs into specific product/system requirements.
  
• FAST (Function Analysis System Technique):
  
• Graphical modeling technique for clarifying, visualizing, and prioritizing requirements.
  

Phase 1:

Chosen Techniques for SimulSecure

Interview and Questionnaire:

• Primarily selected due to direct interaction with stakeholders (users, educators, cybersecurity experts).
  
• Interviews provide qualitative insights into challenges and requirements for effective cybersecurity simulations.
  
• Questionnaires help quantify user preferences and gather statistically significant information.
  

Benefits

• Ensures a comprehensive understanding of the target audience's requirements, preferences, and learning objectives.
  
• Combining both techniques allows for tailored and dynamic development of SimulSecure.
  
• Personalized insights are crucial for creating a highly effective and relevant cybersecurity educational platform.
  

Interview Insights

questionaire Insights

Proposed System

Game Objective and Focus:

• Designed for individuals interested in cybersecurity.
  
• Imparts fundamental concepts and skills.
  
• Aligns with the need for cultivating cybersecurity expertise.
  

Game Mechanics and Content:

• Emphasizes problem-solving, critical thinking, and ethical hacking.
  
• Covers a wide spectrum of cybersecurity topics.
  
• Comprehensive learning experience with dynamic challenges.
  

Real-World Relevance:

• Scenarios inspired by real-world cases.
  
• Facilitates practical knowledge acquisition.
  
• Addresses actual cybersecurity challenges.
  

features re-evaluation

Phase 2

Software Process Models are methodologies used to plan, design, implement, test, and maintain software systems. They provide a structured framework for managing the entire software development lifecycle

They help to improve the quality, efficiency, and predictability of software development projects by defining activities, tasks, and guidelines.

Phase 2

Types

• Water Fall Model
  
• Prototyping
• V-Model
• Incremental
  
• Spiral
• Unified Process (UP)
• Extreme Programming (XP)
  

Phase 2

Agile Development Methodology The Agile processes are a group of methodologies emphasizing iterative development, flexibility, and customer collaboration. Agile processes promote adaptability, customer feedback, and continuous improvement. They are suitable for projects with evolving requirements.

Scrum is an Agile framework with short development cycles called sprints. It focuses on collaboration, adaptability, and delivering a potentially shippable product increment at the end of each sprint.

Phase 2

Sprint 1 - General Interface

Sprint 2 - Establish a vibrant and user-friendly In-Game Market within SimulSecure, allowing players to personalize their experience, purchase skins and loot items, and engage with weekly promotions seamlessly across multiple gaming platforms.

Sprint 3 - Develop a single scalable map for the game in SimulSecure, providing players with an immersive and dynamic environment for cyber investigations.

Phase 3

System Context Diagram

Phase 3

Entity Relationship Diagram

Phase 3

Data Flow Diagram - Sprint 1

Phase 3

Use Case Diagram - Sprint 1

Phase 3

Use Case Diagram - Sprint 1

Phase 3

Equipment/Resources:

• Development Hardware: High-performance PCs with Unity development environment, iPads.
  
• Server Space: Cloud-based server space for database management and multiplayer functionality.
  
• Software Licenses: Unity Pro licenses, SQL Server licenses, JIRA subscriptions, Procreate Premium, Blender, Mixamo, PlasticSCM.
  

Phase 4 - Software Testing

Definition

Software testing is a key activity, both in software development and in software maintenance.

Objectives

Its objectives are opposed to that of development: instead of making the system work, it aims at breaking it, thus revealing the presence of defects. This is the main reason why development and testing teams should be separate.

Phase 4 - Software Testing

Types of software testing

Phase 4 - Testing PLAN

Scrum Sprints and Test Cases Overview

Sprint 1: General Interface (15 Test Cases)

• Test Suite 1: Verify correct display of the login screen.
  
• Test Suite 2: Ensure functionality of all buttons and navigation elements on the main menu.
  
• Test Suite 3: Validate game mechanics, including responsiveness on different devices.
  
• Authentication functionality tested.
  
• Check for visual glitches, UI inconsistencies, and accurate display of error messages.
  
• Test logout functionality.
  

Phase 4 - Testing PLAN

Scrum Sprints and Test Cases Overview

Sprint 2: In-Game Market (6 Test Cases)

• Test Suite 4: Test the functionality of purchasing skins and loot items.
  
• Verify personalization options for players.
  
• Ensure correct display and application of weekly promotions.
  
• Validate the seamless experience of engaging with promotions.
  
• Test payment gateway integration for in-game purchases.
  

Phase 4 - Testing PLAN

Scrum Sprints and Test Cases Overview

Sprint 3: Scalable Map (7 Test Cases)

• Test Suite 5: Test the scalability of the map with an increasing number of players.
  
• Validate the dynamic environment for cyber investigations.
  
• Test the interaction of players with map elements.
  
• Ensure an immersive experience provided by the map.
  
• Validate map performance on different devices.
  
• Test for collision or navigation issues.
  
• Verify integration of the map with other game features.
  

Phase 4 - Test Procedure

General Interface (15 Test Cases)

• Test Suite No. 1 - Login Page
  
• 1.1 Valid Login
  
• 1.2 Invalid Login
  
• 1.3 Forgot Password
  
• 1.4 Sign Up
  
• Test Suite No. 2 - Main Screen
• 2.1 Main Screen Navigation
  
• 2.2 Log Out
  
• Test Suite No. 3 - Game Mechanics - Navigation and Interaction
• 3.1 Player Movement and Navigation
  
• 3.2 Interaction with Objects
  
• 3.3 NPC Interactions
  
• 3.4 Collecting Cyber Evidence
  
• 3.5 Solving a Case
  

Phase 4 - Test Procedure

In-Game Market (6 Test Cases)

• Test Suite No. 4 - In-Game Market - Skins and Investigative Equipment
  
• 4.1 Accessing the In-Game Market
  
• 4.2 Viewing Available Skins
  
• 4.3 Purchasing a Skin
  
• 4.4 Viewing Available Investigative Equipment
  
• 4.5 Purchasing Investigative Equipment
  
• 4.6 Currency and Payment Handling
  

Scalable Map (7 Test Cases)

• Test Suite No. 5 - Map Scalability & Functionality
  
• 5.1 Map Scalability
  
• 5.2 Dynamic Environment for Cyber Investigations
  
• 5.3 Player Interaction with Map Elements
  
• 5.4 Immersive Experience
  
• 5.5 Performance on Different Devices
  
• 5.6 Collision or Navigation Issues
  

Phase 4 - Test Report

Sprint 2: In-Game Market

• Date: May 5, 2024
• Tester: Luan
  
• Accessing In-Game Market: Pass
  
• Viewing Available Skins: Pass
  
• Purchasing a Skin: Pass
  
• Viewing Available Investigative Equipment: Pass
  
• Purchasing Investigative Equipment: Pass
  
• Currency and Payment Handling: Pass
  

Sprint 3: Scalable Map

• Dates: June 1, 2014 - July 14, 2024
• Testers: Han, Luan
  
• Map Scalability: Pass
  
• Dynamic Environment: Pass
  
• Player Interaction with Map Elements: Pass
  
• Immersive Experience: Pass
  
• Performance on Different Devices: Pass
  
• Collision or Navigation Issues: Pass
  
• Map Integration with Other Game Features: Pass
  

Test Report Overview

• Date: July 14, 2024
• Tester Names: Han, Luan
  
• Total Test Cases: 23
  
• Pass: 23
  
• Fail: 0
  

Phase 4

Software Deployment

Definition

Software deployment refers to the process of making a software application available for use. It involves all the activities and tasks that are performed to prepare, test, and install the software in a specific environment, making it accessible to end-users. Software deployment aims to ensure that the software functions as intended and is ready for use in a production environment

Types

We chose the "Education and Training (People)" approach to ensure participants not only acquire skills from SimulSecure: Cyber Investigation Game but also enjoy the learning process. This method focuses on both theoretical knowledge and practical skills, preparing participants to overcome the game's challenges. It harmonizes with the interactive and skill-oriented aspects of the game, creating a more engaging and effective learning environment.

Phase 4

Software Maintainence

Definition

The process of modifying a software system or component after delivery to correct faults, improve performance or other attributes, or adapt to a changing environment

Type

• Corrective
  
• Corrective
  
• Preventive
  
• Enhancement
  
• Adaptive
  
• Perfective (Re-engineering): Making improvements to the existing system without affecting end-user functionality - make it easier to extend and add new features in the future
  

thank you!