Skip to main content
GameDev.net gamedev.net
🔒 Locked

Game about Network Security

Started by Agape Mar 11, 2003 at 12:50 AM 6 replies 400+ views
Original Post
Agape
Agape
OK, I posted this in the Beginner''s forum a couple weeks ago but figured this forum would be the best place for it. The background is that I''m part of a group of four senior computer engineering students, and for our senior design project, we are doing this: "The goal of this project is to develop a working computer game to help introduce people to the issues surrounding computer security. The game would be modeled after the Sim games and would allow the game players to purchase equipment to help secure one of several predefined network configurations. The game would attack the network and the user would get points based on how well they designed the protection system. The game could either be web-based or Windows-based." So...how to go about doing this? I''m not interested right now in technical details, such as the language to be used. I know a bit about networking and security measures, but I''m having trouble seeing how a game on this topic could be made into a) a visually appealing game and b) a game simple enough to be understood by non-technical high school seniors. My initial idea is this: You play the part of a system admin. The company you works for buys the servers and computers and hires the employees, but you are in charge of how these resources are accessed and secured. For example, you could decide to put multiple firewalls and then each firewall could be configured to different degrees of security. For example, let''s say your employees happen to have a low expertise (which you could increase by investing in employee training programs)...so you could prohobit any email attachments that come through. Or you could be more lenient and let just about anything through. In the latter case, you''ll have happier employees but have a higher risk of your network being hacked. In the former case, you will have a more secure network but your employees may see you as a Nazi. And so it goes...some security measures are innocous, some might hinder your employees ability to do work...you have to find the right balance. And so to give the game its challenge, I think there would have to be some basic economic model. Over time, your company generates profits. You have no direct control over this, but if your company gets continually hacked, then of course your budget will be slashed. If you put too stringent and complex of security measures on, then that may make your employees too inefficient, and that will cut into the company''s profits. So the challenge is how to make this graphically interesting. I thought maybe having an isometric representation of your office with employees and computers would be interesting, but might not be very relevant to actual network security architecture. Things like setting up a firewall or a new cryptographic standard...how would you graphically/symbolically represent this? In the earliest SimCity (B&W days), building the actual city was put at a very abstract level...you just placed zones together. But at least there was a lot of graphical appeal in seeing your city grow. I can''t say that that kind of appeal lies in seeing your network grow. Maybe I''m just being unimaginiative. So that''s the gist of it for now. Comments? Suggestions?
Oluseyi
Oluseyi
How about a spatial diagram of your network, showing servers, firewalls and workstations located on each floor and in each room of your facility (ie, the spatial layout mirrors the building layout in 3d). This would be an auxillary view for managing the physical network, switchable to a "normal" view where you''d see the people inhabiting these offices (view range in both modes could be constrained by the user/sysadmin avatar''s location). Some other functions would be put together puzzle- or building-block- style (a new protocol or policy) and then "stuck" onto whatever machines are responsible for implementing or enforcing them.

Other data should be accessible in tabular logs (bandwidth usage, network access and authentication records, etc.), perhaps only available from computers when logged in as root (this could provide incentive to upgrade to wireless support, which would then introduce the challenges of shoring up Wi-Fi hotspot data leaks).

Interesting idea. Good luck, and tell us how it goes.
Agape
Agape
Yeah, I also thought about having a view where you could see the layout of the network...similar to how in SimCity you could see the sewer layout of your city...although in my case, the sewer view--the least graphically interesting portion, is the more vital one.


Bandwidth usage and logging will be part of the game...I thought that having the program generate a list of websites that your employees are viewing (the less security you have, the more likely you''ll see sites like "www.xxxl33twarez.com" showing up on the logs) would be sort of cute. The main problem is how to have this kind of detail but not bore the user who isn''t *initially* interested in network security.

Anyone here well versed in network security? I''m looking for network security concepts that could be well implemented in a game like this. So far I can think of firewalls, anti-virus software, redundant systems, certain access controls, encryption. Also, since most breaches of security are due to social engineering (i.e. a pretty lady walking in and convincing a clueless employee to give her passowrd to admin account), things like biometrics and other identity verification protocols would be good to include.
Nypyren
Nypyren
Would your simulation include distributed denial of service attacks? or just information security stuff?

I attended a networking conference a while back and gained some interesting knowledge about some of that stuff.

500*1
bob_the_third
bob_the_third
As an addition (not a core part of the game that you would turn in for a grade), how about making it multiplayer, and letting the user play as either a sys-admin on a network in the greater collection of networks, or as a hacker/cracker in a number of deviant net-subculters? That way users would be pitted against users, and you''d get a human creativity element. Also it would allow legal hacking which would be fun. The trick would be creating a detailed system, and then leaking information on it for the hackers to use (or setting up special websites for them to get info from). Of course the program itself would have to be secure, because while it would be cool to be hacked in the game world, it would stink if a hacker could use the game to hack your real machine. Bottom line, it could be kind of a capture-the-flag type game; network people (say a company, or a government) against the hacker community, or even company against company or government against government, or any combination of those in a MMOG.

P.S. For the purposes of getting graded, I would suggest cutting the game way down in complexity. Speaking from senior design project experience (my team is designing an instant-messaging system in Java), you''ll wind up stripping out a lot of features at some point; just make sure you don''t lose credit by waiting to the last minute and not living up to the original design proposal.
Oluseyi
Oluseyi
quote:
Original post by Agape
Yeah, I also thought about having a view where you could see the layout of the network...similar to how in SimCity you could see the sewer layout of your city...although in my case, the sewer view--the least graphically interesting portion, is the more vital one.

Is the objective here to create an entertaining product or an educative one? Face the fact that network security isn''t glamorous - and there''s nothing you can do about that - so instead focus on creating a solid product that fulfills the core requirements of illustrating network security concepts and consequences in an interesting way. Your target audience is likely to be people taking a network security class (ie, your product is more of a teaching aid) than average gamers.

Stay focused.
boolean
boolean
Im not big on networking, but this would be heaps of fun. I think it would be cool to have a certain areas of the building praise you for not having any viruses, but have one area winge and complain because you cut the incoming emails to only .txt files which are under 20kb as they were the biggest source of .pif files in the building.

I think this would be an awesome, awesome game!
Bugged
Bugged
Have you ever tried a game called Uplink? Its sort of the opposite of what you are talking about and I thought it might be worth you having a look. I think they have a demo on the site for DL too

http://www.introversion.co.uk/uplink/



[edited by - bugged on March 13, 2003 4:42:11 PM]

Topic Locked

This topic has been locked by a moderator. New replies are not allowed.

Sign in to reply to this topic.