1 of 74

December 12, 2024 cscoastalhub@stockton.edu

Create a Culture of Cybersecurity through Games

CS COASTAL HUB

2 of 74

Why Cybersecurity Matters

Technology is everywhere - communication, education, healthcare, and beyond.

Cyber Attacks happen every 39 seconds.

Schools, businesses, and individuals are all targets.

CS COASTAL HUB

3 of 74

High Stakes in the Digital Age

Cyber incidents can lead to financial loss, stolen data, and learning disruptions.

Students face risks like identity theft and online threats.

Cybersecurity is not just technical - it’s societal.

CS COASTAL HUB

4 of 74

The Educator’s Role

You can empower students to navigate and protect the digital world.

Inspire interest in a growing field with vast job opportunities.�
Teach not just coding but responsibility and ethics in tech.

CS COASTAL HUB

5 of 74

Fostering a Culture of Cybersecurity

Cybersecurity is about creating a safer digital future.�
Equip students with awareness, skills, and ethical mindsets.

Be leaders in promoting cybersecurity resilience in our schools and communities.

CS COASTAL HUB

6 of 74

Let’s Dive In!

By the end of today, you’ll feel more empowered to lead the way in cybersecurity education for your students.

Together, let’s create a safer digital

environment for all.

7 of 74

bit.ly/Cybgame

CS COASTAL HUB

8 of 74

Agenda

What is CIAS?

Intro to Cyber Threat Protector Game

Rules of Play

Gametime!

Debrief

CS COASTAL HUB

9 of 74

Designed for K-2 players, Cyber Threat Guardian mirrors other popular card games for young learners with its simple design and reinforced concepts. Through fun, repetitive play, students will learn to stay safe on mobile devices, game consoles and other devices.

What is CIAS?

The UTSA Center for Infrastructure Assurance & Security (CIAS) is committed to creating a culture of cybersecurity through a comprehensive K-12 Cyber Journey Program.

The CIAS conducts research into effective ways to introduce students to cybersecurity principles through educational gaming.

The program targets four demographics: elementary school, middle school, high school and colleges/universities.

Their K-12 Cyber Journey Program currently includes the following educational tools:

CS COASTAL HUB

10 of 74

A multi-player card game for students in third through fifth grades, Cyber Threat Protector introduces players to essential cybersecurity vocabulary and defense strategies. Become immersed in the world of network defense and cyber-attacks with this easy-to-play game.

Designed for grades 6 and up, Cyber Threat Defender: The Collectible Card Game is available as both a collectible card game and electronic download to provide a basic awareness of a number of security issues. The card game, available in English and Spanish, is a fun, multiplayer game in which players build their networks while defending against realistic cyber-attacks.

CS COASTAL HUB

11 of 74

How Can I get the Cards?

12 of 74

Cyber Threat Protector: Learning About Cybersecurity Through Gaming

CS COASTAL HUB

13 of 74

Introduction to Cyber Threat Protector

Cyber Threat Protector is a fun card game for 3rd-5th graders
It teaches important cybersecurity concepts
Two players compete to reach 20 points first
You'll learn about cyber attacks and defenses

CS COASTAL HUB

14 of 74

15 of 74

Core Concept of Cyber Threat Protector

Create a network of Assets to gain points
Build Defenses to prevent malicious Attacks and Events against your Assets

16 of 74

Anatomy of an Asset Card

Blue Asset cards gain 1 point each round

Once played, an Asset card will remain on the play field unless removed by an opponent’s card

Card Name

Card Image

Gameplay Description

Real World Description

17 of 74

Anatomy of a Defense Card

Card Name

Card Image

Gameplay Description

Real World Description

Green Defense cards defend your network from attacks

Blocks/Prevents certain attack cards from being played by your opponent

Removes/Discards cards that your opponent has on the field

Defense cards remain on the play field unless removed by your opponent

18 of 74

Anatomy of an Attack Card

Card Name

Card Image

Gameplay Description

Real World Description

Red Attack cards negatively affect your opponent’s network

Attack cards remove a point from your opponent each round and stay on the play field unless removed by a defense

Some Attack cards may also remove defense cards

19 of 74

Anatomy of an Event Card

Card Name

Card Image

Gameplay Description

Real World Description

Gold Event cards negatively affect your opponent’s network

Events have special abilities

Events are unique. They must be discarded immediately after they are played.

20 of 74

Cyber Threat Protector Layout

21 of 74

Getting Started

Open your pack of Cyber Threat Protector cards
Shuffle the deck
Place the deck between you and your opponent to share. (This deck is the draw pile.)
Decide who is going first and who will go second
Write your names on a score sheet

22 of 74

Rules and Gameplay

Each player draws five cards from the draw pile/deck (player 1 draws first)

A player should never have more than 5 cards in their hand

Player One

On the first turn, only player 1 can play up to 4 cards from their hand

a.

This is the only time that a player will play more than 3 cards

Player 1 discards any cards not played (face up) into a new pile – called the discard pile

Both players share the discard pile

Player 1 must then draw 5 more cards from the draw pile

23 of 74

Rules and Gameplay

Player Two

Player 2 plays up to three (3) cards from their hand

Once player 2 plays their cards, they must discard remaining cards into the discard pile

Player 2 draws five (5) cards

When Player 2 finishes their turn, round one ends

Both players determine the score at the end of the round

24 of 74

Scoring

After the second player finishes their turn, both players must look at the cards on the field to determined how many points you’ve gained or lost
Each Blue card = Add 1 point
Each Red card = Remove 1 point from your opponent

First player to 20 points wins!

Score Sheet
Names	Player 1:	Player 2:
Round 1
Round 2
Round 3
Round 4
Round 5
Round 6
Round 7
Round 8
Round 9
Round 10
Round 11
Round 12
Round 13
Round 14
Round 15
Round 16
Round 17
Round 18
Round 19
Round 20

25 of 74

Sample Scoring (example)

Player 1 gains

3 points

Player 2 will lose 2 points

26 of 74

Reminders

Read Your Cards. Some cards may only be played if your opponent has a specific card on their playfield
Players will discard any remaining cards and draw 5 cards at the end of their turn
Players must discard the cards in their hand when they end their turn

Common Terms

Play field – The area you or your opponent plays cards. Your play field is the area directly in front of you, while your opponent’s play field is the area directly in front of them.
Discard pile – The shared deck that you and your opponent place your discarded cards
Draw pile – The shared deck that you and your opponent draw cards from

27 of 74

Gameplay!

CS COASTAL HUB

28 of 74

Debrief

CS COASTAL HUB

https://cias.utsa.edu/ctp/

General Reflection:

What was your initial strategy for identifying and mitigating cyber threats in the game? Did it change as the game progressed?
What was the most challenging aspect of the game, and why?
How did you prioritize different types of threats or decisions during the game?

Connection to Real-World Applications:

How do the threats presented in the game compare to real-life cybersecurity issues faced by schools or communities?
What parallels can you draw between the roles or decisions in the game and actual cybersecurity practices?
If you were teaching this game to students, how would you explain the importance of identifying vulnerabilities in their digital habits?

Team Dynamics (if applicable):

If you played as a team, how did you communicate and collaborate to protect your systems?
Did any disagreements arise about how to address specific threats? How did you resolve them?

Applying Learning:

What are some key takeaways from the game that you can integrate into your teaching about cybersecurity?
How would you use this game as a teaching tool to engage students and help them understand cybersecurity concepts?
What would you add or change in the game to make it more relevant or effective for your students?

Ethical and Societal Considerations:

How does the game highlight the ethical responsibilities of protecting personal and organizational data?
What societal impacts might occur if cyber threats are not adequately addressed?

Call to Action:

What are some immediate steps you can take to improve your own cybersecurity awareness and habits?
How can you empower your students to be more proactive about recognizing and preventing cyber threats?

29 of 74

Upcoming Workshops From The CS Coastal Hub

Click Here

Questions? Please contact the SRI&ETTC at cscoastalhub@stockton.edu

CS COASTAL HUB

30 of 74

Thank you Fran, Vivian, David, Daryl and all the others that made this day possible!

CS COASTAL HUB

31 of 74

Learn to Play �Cyber Threat Guardian

32 of 74

33 of 74

Create a network of Assets
Build Defenses to prevent malicious Attacks

Core Concept of Cyber Threat Guardian

Asset

Defense

Attack

34 of 74

Each card has pictures and icons that are used for quick reference
Three basic types of cards:

What do the cards do?

Attack

Defense

Asset

The foundation of your computer network

Protects your network from attacks

Malicious threats that can exploit your network

35 of 74

Anatomy of a Card

Card Name

Card Image

Gameplay�Description

36 of 74

These cards represent the things you may have in your home like a desktop computer, cell phone, game console or private information about yourself. These are the cards you need to protect.

Card Types – Assets

37 of 74

Defense cards represent the systems used to protect devices, such as firewalls, anti-malware, encryption and education. These are the cards used to protect the asset cards. Defense cards will prevent the attack cards from removing asset cards.

Card Types – Defenses

38 of 74

Attack cards are represented by the various ways hackers, or bad guys, can harm computers, game consoles, mobile phones or steal private personal information. Attack cards will remove unprotected asset cards.

Card Types – Attacks

39 of 74

Players use the category icon to match up their cards when attempting to play them.�

Card categories are represented by the following four icons to the right:

Icon Categories

40 of 74

Game Setup & Rules (Grades 2+)

Shuffle the deck of cards. Once the deck is shuffled, the deck is set to the side of the playing area. This is called the draw pile.

Draw

Pile

Discard

Pile

Player’s

Asset

Card

Player’s

Asset

Card

Player’s

Asset

Card

Player’s

Defense

Card

Player’s

Defense

Card

41 of 74

Defense cards are placed above the asset cards with the same category icon.
Opponent Attack cards are placed above asset or defense cards of the same category.

Game Setup & Rules (Grades 2+)

42 of 74

Game Play Layout

43 of 74

Both players draw two cards from the draw pile. It doesn't matter who draws first. This is the only time both players draw two cards during a turn.
Cards may only played in the following order: Blue Asset, Green Defense, Red Attack.��For example, a Defense card cannot be played until an Asset card has been played first.��Consider the cards on the right. One column is correct. One is wrong. Which one?

Getting Started: Step 1

44 of 74

Getting Started: Let’s Illustrate

If the card is a blue asset card, the player places the card in front of them in the playing area.
If the card is a green defense card, the player places the card in front/above any blue asset card with the same category icon in their playing area that does not already have a green defense card protecting it.

45 of 74

Getting Started: Let’s Illustrate

If the card is a red attack card, the player can use it to remove any green defense card with the same category icon OR any unprotected blue asset card of their opponent with the same category icon.��The icons of an attack card must match icons that your opponent has in play.��Protected blue asset cards cannot be removed until the green defense card protecting them is removed first. Which cards on the right can the attack cards remove?

46 of 74

Continued Play and End of Game

Step 2:

Play continues with each turn. After each player has completed a turn, the “round” is over.
Only after the round is complete can both players draw one card and attempt to play that card during their new turn.

Step 3: Once players use all the cards in the shared draw pile, the game ends.

Note: It’s possible that a player may not be able to place any cards in the game’s play area. Any cards not played should be placed in the discard pile to complete your turn.

47 of 74

Scoring: It’s Simple!

The player with the most point wins.

Players count the number of blue asset and green defense cards that they have in front of them. Each card is worth 1 point.

How many assets and defenses are shown to the left?

Answer: �6 cards total = 6 points

48 of 74

Learn to Play

Cyber Threat Defender

49 of 74

50 of 74

What is Cyber Threat Defender?

Cyber Threat Defender (CTD) is a competitive, collectible card game similar to games, such as Pokémon or Magic the Gathering. Through the use of booster packs, players can customize their decks to develop different strategies to defeat their opponents.

51 of 74

Cyber Threat Defender Objective?

Players create a network of Assets and build Defenses to prevent Attacks and from opponents and Events are various things that can happen.

Asset

Defense

Event

Attack

52 of 74

Card Types

The four basic types of cards:

Assets:
Defenses:
Events:
Attacks:

Asset

The foundation of your computer network

How you protect your network from attacks & disaster Random happenings, for better or worse

Malicious attempts against your network

Defense Event Attack

53 of 74

Anatomy of a Card

Card Name

Point Value

Card Effect Details

Card Type

Card Description

NOTE: Some cards affect scoring indirectly; always read the Card Effect Details for a full understanding of how a card affects scoring

54 of 74

Common Card Mechanics – Gain Points

55 of 74

Common Card Mechanics – Gain Points

56 of 74

Common Card Mechanics – Gain Points

57 of 74

Common Card Mechanics – Opponent Point Loss

58 of 74

Common Card Mechanics – Card Removal & Immunity

59 of 74

The Value of Cards

Read the bottom paragraph of each card description

Indicates points gained or lost and who is affected
Not all cards are worth points
Playing an Attack card makes your opponent lose points, not you!

60 of 74

Recommended Layout for Play

We recommend that players keep all cards they play in their own area
Any Attack or Event card in play can be viewed as targeting the opponent (where applicable)
Note: Event cards can either hinder your opponent or benefit yourself. Read the cards carefully

61 of 74

Recommended Layout for Play (with no game mat)

Asset Cards

Defense Cards

Attack and Event Cards

Player’s Network Area

Discard

Draw

62 of 74

63 of 74

What is your strategy?

While you play, consider some of the following scenarios.

64 of 74

What is your strategy? Defense Cards

Placing defense cards as soon as possible.

65 of 74

What is your strategy? Defense Cards

For example, if

you are going to play a Wireless Router, you may consider playing an Encryption card to stay protected.

66 of 74

What is your strategy? Event Cards

Event Cards can be played by either player at any time during a round. They can be crucial to helping you win.

67 of 74

Getting Started: Each Player Does the Following…

Put into play: one Desktop Computer, one ISP Connection

“In Play” = face up on the table in your asset zone (the area closest to you on the table).

Note: You can play any one Asset – System and one Asset – ISP card type; however, the Desktop Computer and ISP Connection cards are the only playable options within the base deck.

Shuffle your deck
Draw seven cards to get started. You may look at your cards.

68 of 74

How do you play?

Turn-based game.

During your turn, you may play up to three cards from your hand if possible. Read the second paragraph fully.

Each card’s effect takes place immediately when played unless specified by the card.
The Event cards do not count toward this limit and can be played during either turn

When done playing cards, if you have more than five cards in hand, you must discard until you have five cards.

You choose any card in your hand to send to your discard pile and continue doing this until you only have 5 cards left in hand.

69 of 74

How do you play?

Finally, draw two cards, and your turn immediately ends. You will always draw 2 cards at the end of a turn.

Then, the next player’s turn begins. This player follows the same steps as player one.

When both players have finished their turn that is considered a round. Scoring occurs at the end of each round.
Once scoring has been done, round 2 begins and the process repeats until there is a winner.

70 of 74

How does scoring work?

The cards next to players 1 and 2 (to the right) represent the current cards that each player has in play, which affect their respective scores.
Each card shown has a value of 1 except for the red attack card, which is -1. How many points does each player earn this round?

1

2

71 of 74

How does scoring work?

Player One gains 1 point in total for this round

Gains 2 points from Assets, but loses 1 point from an Attack

Player Two gains 3 points in total for this round

Gains 2 points from Assets and 1 point from an Event. There are no Attacks causing the loss of points.

1

2

The first player to 30 points wins! (First to -45 points loses)

72 of 74

Let’s play for 5 minutes…

We will have a micro quiz on identifying incorrect states of game play on the next couple slides.

73 of 74

Can you identify what’s wrong?

Player Two has a malware type attack card in play while Player One has an Anti-Malware
Player One is using a laptop without the Wireless router card

1

2

74 of 74

Can you identify what’s wrong?

Player One has played a Firewall Rules Not Updated card but Player Two’s Host-Based Firewall has not been removed.
Player Two has three Desktop Computers in play but they only have one ISP Connection.
Reading the descriptions and names of these cards will help you avoid these mistakes

1

2