The behavioral aspect of cybersecurity has gained more attention in recent years. By their actions, people can improve the security of their devices and organizations, but also hinder the successful implementation of security in these areas. As awareness campaigns where information is merely distributed are not effective, we designed a cybersecurity serious game applicable for cybersecurity training. The effectiveness of this game was experimentally tested against a noncybersecurity game that did or did not contain cybersecurity information, through measures of the theory of planned behavior. Results showed that the cybersecurity game resulted in higher self-reported scores on attitudes, perceived behavioral control, intentions, and behavior compared with both noncybersecurity games. For subjective norms, we only found an effect in the comparison between the cybersecurity game and the noncybersecurity game without additional information.

中文翻译：

---

网络安全培训的成功游戏化

近年来，网络安全的行为方面受到了更多关注。人们可以通过他们的行为提高其设备和组织的安全性，但也阻碍了这些领域安全性的成功实施。由于仅分发信息的意识活动无效，我们设计了适用于网络安全培训的网络安全严肃游戏。通过对计划行为理论的测量，针对包含或不包含网络安全信息的非网络安全游戏，对该游戏的有效性进行了实验测试。结果表明，与非网络安全游戏相比，网络安全游戏在态度、感知行为控制、意图和行为方面的自我报告得分更高。对于主观规范，