Planning the perfect heist: an adversarial cyber game

This paper introduces "Heist: An Adversarial Cyber Security Board Game", designed to enhance cyber security knowledge through interactive gameplay. Players engage in asymmetrical team-based play, simulating a 'cyber heist' on a sci-fi hotel. The unique setup integrates technical, social, and organisational strategies, enabling diverse cyber security approaches using a deck-building mechanic.Heist development emphasised CyBOK knowledge areas, resulting in core mechanics focused on deck building, promoting critical thinking and collaboration. Players deploy specialists to attack or defend, with attackers aiming to tarnish the hotel's reputation while the defender seeks to identify them through digital evidence. The game strikes a balance between strategy and learning, broadening participation in cyber security and deepening players' understanding of tactics.Playtesting sessions informed refinements, enhancing educational impact and entertainment value. Heist exemplifies an innovative approach to cyber security education, merging theory and practical application in an immersive board game format. It showcases the potential of educational games for complex subjects like cyber security.