A Structured Process for Scenario-Based Gamification of Cyber Threat Intelligence for Space System Security

Gamification of cyber threat intelligence holds the promise of enhancing user engagement and interaction in cybersecurity in general, and specifically for space systems cyber resilience. The narrative game mechanic plays an important role in shaping the overall interactivity and agility of gamification solutions. This paper explores theoretical foundations for narrative development in games and gamification, presents key design considerations for gamifying cyber threat intelligence, and formulates a structured narrative development process comprising three distinct phases of cybersecurity storyline development, cyber threat intelligence development, and gamification rules development. This process, developed through a humancentred design approach that engaged domain experts and endusers, adopts the narrative interweaving technique by adapting representative cyber-attacks from the cyber supply chain and space system security context, it then links the resulting scenario to cyber threat intelligence information developed using opensource frameworks like MITRE ATT&CK and DEF3ND, and finally structures the user engagement with the content along a decision tree. The utility of this approach is demonstrated and discussed with reference to the overall gamification solution that has been developed in this project. The paper contributes to the growing area of gamification in cybersecurity, beyond education and awareness training, and proposes an approach for narrative development for CTI-based gamification.