Using Facebook's Open Source Capture the Flag Platform as a Hands-on Learning and Assessment Tool for Cybersecurity Education

Background

Computer security and cybersecurity practices in general have become critical for protecting users, applications and data; however, this field experiences tremendous shortages in regard to skilled and trained professionals. The typical methods of training including web-based classrooms, instructor-led training, newsletters, etc. are not engaging and take considerable time (Jordan, Knapp, Mitchell, Claypool & Fisler, 2011). Often most of these methods of training were found to be ineffective because the employees were not truly engaged in the training process. Employees are provided with a vast amount of information in a short period of time, which can be overwhelming and ineffective for learning. A more immersive and interactive method of teaching and learning seems to be required in the area of cybersecurity. One method to train all employees and organizational leaders is the use of gamification, which allows everyone to play the roles of various types of attackers. This method can enable employees to reduce the number of attacks that occur due to human susceptibility exploits (Adams & Makramalla, 2015).