Soceng Warriors: Game-Based Learning to Increase Security Awareness Against Social Engineering Attacks

Most businesses rely on technology, such as the internet and smartphones. A significant amount of money is spent on security tools, software, and hardware, but a naive employer can provide an attacker with all the information without accessing the system. Social engineering is about utilizing the weakest aspect of any institution or organization: the human element. Humans are more accessible to compromise than computer systems and networks. Most people are raised to be polite and helpful, causing them to trust others by nature. Improving cybersecurity technologies and infrastructure alone will not suffice to combat social engineering attacks. An education approach is one strategy. This paper suggests ‘Soceng Warriors,’ an educational game designed to raise security awareness of social engineering attacks. This game was tested by 30 responders aged 14 to 25 years. Each responder completed the pre-test and post-test questionnaires. The test is used to determine the extent to which people are aware of social engineering attacks. According to the results of the paired T-test, Soceng Warriors can raise security awareness against social engineering assaults.