Business Games | Protect Your Information with Intrusion Detection (Power)

Business games are used to model various situations arising in day-to-day activity and to analyze all aspects that influence the decision-making process. Currently, the usage of business games in the information-security area is limited by the lack of the necessary skilled experts needed to predict various situations as well as assess the performance of business-game participants. In most fields, this role is delegated to computers. However, in the field of information security, there are no adequate programs able to serve this purpose. The efficiency of the business game approach has been proved in practice. For example, the level of mastering of materials and practices as a result of participation in a business game format is 79.3%, while traditional methods, including workshops, generate a figure of only 54%. Two weeks after participation, the amount of information retained for the two methods is 64.9% and 11.8%, respectively. After four weeks, the levels are 49% and 8.5%, while, after six weeks or more, the numbers are 32% and 5%.

ISS has developed a course known as "Enterprise Network Security", organized on the basis of business games. Students attending this course are divided into two groups. The first group plays the role of the intruders, imitating various attacks on the protected network. The second group plays the role of security administrator. These players try to detect and stop the attacks, and then investigate the security incidents. The groups then swap roles.