CIST: A Serious Game for Hardware Supply Chain. Issue 122 (November 2022)

• Record Type: Journal Article
• Authors: Hart, Stephen; Halak, Basel; Sassone, Vladimiro
• Is Part Of: Computers & security. Issue 122(2022)
• Publication Date: 2022-11
• Subjects: Serious gaming -- Cyber security education -- Gamification -- Design -- Training effectiveness -- Threat models -- Hardware Security; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2022.102912
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: The globalisation and outsourcing of the IC supply chain have led to a more complex production cycle. Using threat models to understand the attacks can help engineers build stronger countermeasures and evaluate against different options to create better protection from attacks. Gamification is an alternative to teaching engineers threats using threat models and trying to keep up to date with new threats. Playing a serious game based on the IC hardware supply chain allows players to take control of self-learning and build knowledge through experiences in the gameplay. This paper propose CIST: A serious game for hardware supply chain, designed for hardware security and uses a threat model called CIST, designed to overcome the different requirements for hardware threats and gaps in current generic security threat models. The CIST game covers hardware-related risks through the complete IC life cycle from design, manufacturing, using the IC within a system and finally, recycling the ICs.