PenQuest: An adversarial cyber security game for education and threat assessment

Speaker: Robert Luh , University of Vienna

Date: Thursday, May 13, 2021

Time: 2:00 PM to 3:00 PM Note: all times are in the Eastern Time Zone

Public: Yes

Location:

Event Type: Seminar

Room Description:

Host: Srini Devadas, CSAIL

Contact: Kyle L Hogan, klhogan@csail.mit.edu

Relevant URL:

Speaker URL: None

Speaker Photo:
None

Reminders to: seminars@csail.mit.edu, Robert.Luh@fhstp.ac.at

Reminder Subject: TALK: PenQuest: An adversarial cyber security game for education and threat assessment

Abstract:
The complex interplay of attack techniques and possible countermeasures often makes it difficult to appropriately plan, implement, and evaluate an organization’s defense. In this talk, we introduce PenQuest, a meta model-turned-strategy game that is designed to present a complete view on information system attacks and their mitigation while providing a tool for both data enrichment and security education. PenQuest simulates attacker & defender behavior as part of a dynamic, imperfect information multiplayer game that derives its ruleset from established information security sources such as MITRE ATT&CK, STIX, and NIST SP 800-53. Attack techniques, vulnerabilities, and mitigating controls are mapped to game elements such as player actions or equipment. The gamified model considers and defines a wide range of actors, assets, and actions, thereby enabling the assessment of cyber risks while giving security practitioners the opportunity to explore specific attack scenarios in the context of an abstracted IT infrastructure.

We are currently implementing PenQuest as a digital multi-player game, which we are happy to introduce in this talk.

Zoom:
Join Zoom Meeting
https://mit.zoom.us/j/97527284254

Password: <3security

One tap mobile
+16465588656,,97527284254# US (New York)
+16699006833,,97527284254# US (San Jose)

Meeting ID: 975 2728 4254

US : +1 646 558 8656 or +1 669 900 6833

International Numbers: https://mit.zoom.us/u/auBvg4NEV

Join by SIP
97527284254@zoomcrc.com

Join by Skype for Business
https://mit.zoom.us/skype/97527284254

Research Areas:
Security & Cryptography

Impact Areas:
Cybersecurity

See other events that are part of the CSAIL Security Seminar Series 2021.

Created by Kyle L Hogan at Monday, May 10, 2021 at 3:27 PM.