28

How Portal Can Change Your Security Forever - Kati Rodzon at BSidesLV

Embed Size (px)

Citation preview

THE LEARNING CURVE Sk

ill A

cqui

sitio

n

Time

IT”S TOO HARD!

I’m BORED!

LINEAR PLAY GAMES

Level 1 Level 2 Level 3 Level 4 Level 5 Level 6 Level 7

NON-LINEAR PLAY GAMES

Skills

Teammates

Opponents

Tools

A STEEP LEARNING CURVE

Skill

Acq

uisi

tion

Time

A SHALLOW LEARNING CURVE Sk

ill A

cqui

sitio

n

Time

YOU DECIDE

INTELLECTUAL COMPLEXITY

Time Filler Complete Immersion The ‘Grey Area’

STARTING A GAME

§ Creating a Foundation of Skills

STARTING A GAME

§ Creating a Foundation of Skills

§ High Reward Schedule

STARTING A GAME

§ Creating a Foundation of Skills

§ High Reward Schedule

§ Make sure players are placed within their skills level

IT”S TOO HARD!

I’m BORED!

MAKING A TASK ‘SEEM’ EASIER

§ Break Down Into Subtasks

IT”S TOO HARD!

MAKING A TASK ‘SEEM’ EASIER

§ Break Down Into Subtasks

§ Reward more frequently

MAKING A TASK EASIER (OR SEEM THAT WAY)

§ Break Down Into Subtasks

§ Reward more frequently

§ Provide outside tools for ‘practice’

MAKING TASKS MORE DIFFICULT

§ Add sub-skills onto current skills

MAKING TASKS MORE DIFFICULT

§ Add sub-skills onto current skills § Add things to the environment/level

MAKING TASKS MORE DIFFICULT

§ Add sub-skills onto current skills § Add things to the environment/level (Portal goop) § Add elements for complexity (e.g., tools, weapons, skills)

BEYOND THE BADGE!

Keep your target audience away from the ends of the curve

Know the behavior your way (linear? Repeated interaction?)

80% of training needs to be either ‘time filler’ or ‘grey area’ in design

Onboarding is KEY to getting and keeping users (foundational information)

Create roadmaps the add sub skills onto current skills (e.g., network pentesting >>> application pen testing >>> reverse engineering)

Switch team members to encourage learning and engagement

Team play keeps employees/users/crowds/humans repeatedly engaged

Provide outside resources for users to practice their skills

PRO TIP: Do not confound extrinsic and intrinsic rewards!

THANK YOU! [email protected]