Industrial Cybersecurity Game-Scenarios Based on the MITRE ATT&CK Framework

In modern society, cybersecurity has become an increasingly crucial challenge. To prepare the next generation of professionals in this field, we propose interactive approach to teaching industrial cybersecurity concepts. However, it's important to recognize that people are often the weakest point in the security systems of these industries. Additionally, the lack of published cybersecurity training that focuses on Industrial Control Systems (ICS) is a significant challenge that needs to be addressed. There is currently a dearth of training materials available that are tailored specifically to the needs of ICS-based cybersecurity, which is a major issue. To address this problem, discovering new and innovative security training methods that specifically target ICS is necessary. Serious games have become increasingly popular among cybersecurity researchers in recent years as an innovative and engaging approach to educating users and enhancing their awareness and knowledge of cybersecurity-related issues. The purpose of this paper is to provide examples of industrial cybersecurity game scenarios based on the MITRE ATT&CK framework. Our target audience is students with minimal knowledge of industrial cybersecurity.