← All talks

grecs & pupstrr | Project KidHack – Teaching the Next Next Generation Security through Gaming

BSides Orlando58:0284 viewsPublished 2015-11Watch on YouTube ↗
Mentioned in this talk
About this talk
http://bsidesorlando.org/2015/grecs-and-pupstrr-project-kidhack-teaching-the-next-next-generation-security-through-gaming Abstract Wanna teach your kid to be a hacker but don’t know where to start? Security is a fairly complex topic but games offer the best way for kids to learn the basics. This presentation not only reviews a sample of existing games that teach security fundamentals to a younger audience but also discusses a new crowdsourced project to catalog similar fun and entertaining ways to teach kids security. This project could help spur interest in later university and other programs and potentially a career … or at least make our children a more security-conscience adult in whatever field they choose. Bio grecs has almost two decades of experience, undergraduate and graduate engineering degrees, and a really well known security certification. Despite his formal training, grecs has always been more of a CS person at heart going back to his VIC-20, Commodore 64, and high school computer club days. After doing the IT grind for five years, he discovered his love of infosec and has been pursuing this career ever since.
Show transcript [en]

okay are you ready bud thanks yeah I'm ready you ready yeah I'm ready all right all right you just you're supposed to need to be on you're supposed to be you're supposed to hello can I can everybody hear me no okay was there you go all right much better that one works all right my name is Gregson this is [Music] how old are you now [Music] so I have nine more years to use him as a research subject um so today what we're going to be talking about is something that I probably started about two three years back I was interested in seeing if my kids were interested in in the security field and um and it just turned into this big

thing where I was looking for different games and out out there that taught security Concepts and it just there's just tons of them and it turned into this big process where I get a new game I read I review it I let the kids play it and to see if they like it if if they don't I do a blog post and then trying to pull the best of the best together and careers at the in forms like this so disclaimers you know this so the opinions expressed to the opinions expressed do not express the views or opinions of my employers his schools my customers my wife his mom my daughter his sister my parents his

grandparents my in-laws and aunt and his other grandparents um so This Is Us on Twitter I'm on the left he's on the right loves to play Minecraft which you'll see soon um I've been into I've been in industry for about 20 years started or I cut my teeth back in the early 2000s doing a little bit of web pen test or a little bit of web app testing as well as pen testing for career reasons jumped into doing more security engineering work they found out that I could write some so I got put into doing more fisma type stuff is anyone familiar with fisma okay it's sort of the compliance process for the federal government

uh and then go continuing on with that theme of writing um that get pulled in periodically integrating proposals but at that point I was finding that I could theoretically design like the perfect security system but Theory and what you actually Implement are two different things so I took a step back started working in in more of an ox environment doing things like trade studies looking at a lot of the different products that are out there if they can basically meet the requirements that the sales guys say they can meet um and then that kind of dovetailed into working into an operational soft environment and then also doing some I.T training yeah okay you're doing it wow I'm like

that's Magic and he has the clicker um so um I've been I run this website it's mainly focused around the Metro DC area but it's kind of just become my home blog so I write a lot of stuff there uh okay go back all right all right all right so I recently um yeah uh trying to get into the security Consulting field too so looking at doing uh sock type stuff so if anyone's interested in doing that um all right and this is the one transition [Music] T insisted that we must have for his slide

[Music] illegally installed my first Ubuntu system I have my favorite pastime is Minecraft right so today um what we're going to cover just a little background talking about why I did this or why we're doing this look at a selection of games that we've come across that I think are the um or that we think are the best that we found so far for reaching our goals talking about the kid hack project it itself uh and then also what's next and then we're going to close up you're gonna drive all right all right so the first thing is a lot of people like to use cats and I'm a dog lover we actually just got a new puppy

um so I like to use dogs instead so the background we're just going to talk about why we did this and then also the inspiration next slide so first of all it's for the kids so we we read almost every other day there in the newspaper there's various types of cyber attacks sometimes it's the nation states which are very scary because they're really good other times their criminal organizations but even they are getting really good too and this has led to a big demand for cyber security for professionals started tracking a lot of this stuff back in 2009 but just ever since then it's us every week some big report comes out saying hey saying that

there's this need for there's this huge need for cyber Security Professionals so in order to solve that problem back in I think early 2000s the NSA started tapping different schools of Excellence universities have come up with degree programs both at the Masters and at the vascular School level and there's also a lot of different sorts which we're familiar with and then there's Technical Training or organizations too such as Sans other groups like that so but what I was Finding was that there's this gap between stuff that goes on at the University level and uh training after that and you know what about the kids that are at the elementary school and the middle school level

so the goal here was to you know create something that could bridge that Gap you know and I call it preparing the next next generation of information screen professionals by starting by simply getting them interested in early so essentially we are strengthening the pipeline of talented folks that are going to be flowing into the field um that combined with my recent training roles I've been looking at different ways to teach folks based on what I've seen by doing training combined with the age group that I was dealing with it seemed like the best thing to do was to do simulation where you're actually doing stuff and the easiest way to do that is is with games

so the the inspiration for this the past ever since I got into security a long time back you know capture the flags are are always a big inspiration you know I hope did has anyone played in the capture the flag that's going on now here yeah I mean that's one thing like I recommend doing that that's like especially regardless of the level that you're athlete if you're in middle school high school Collegiate level um definitely try to get involved and I know there's this school there's CCDC team I think won the championship here so definitely you know if you're in at the college level right now try to get into clubs like that because you can

go through and get these cyber degrees and although those degrees will teach you the basics they really lack that hands-on experience so you can establish that foundation and then also get active with some of the CCDC type competitions and that can really help you not only get that first job but but it'll definitely make you more effective in that job as well um so back in terms of the inspiration so at uh Derby Con in 2013 did anybody go that year has anyone gone to Derby combo before yeah okay it's a good conference it's up in Kentucky um but in any way there's a gentleman Bruce Potter he's he runs spookon if anyone's heard of that up in it happens up in DC so

Bruce proder gave a talk that it's only a game learning security through gaming and I thought this was a great talk there was a lot of great Theory like theoretical foundations there but what I got out of it was well what can what can I do to take this Theory and actually implement it you know so looking for games that that could help realize what he was talking about uh and then there's um you know a friend and there's tons of Articles like this where they basically talk about the importance of participating in capture the the flags and so this is one that a friend a friend of of mine wrote and then the other thing is a few years ago I read I

didn't want I didn't see the movie yet but I read and Ender's Game and um and I liked you don't want to talk about it too much because I don't want to give any uh anything away but what I really liked was this simulation and of that and trying to take that those Lessons Learned and apply that you know what can we do from a gaming perspective that would help the younger generation to learn some basic security Concepts so these are some of the games that we're going to go through um over on the left there and once again we have our obligatory puppy shot okay so the first one that I'm going to talk about is a game called hacker has

anyone played this before any old old timers I can't find it um so this is a card game uh the history was in 1990 the C the Secret Service rated Steve Jackson games uh in a cough skated a bunch of equipment including the Illuminati BBs so in order to make fun of the whole situation he actually made a game of it that was sad saturated satirizing Secret Service hackers and phone companies so then that was in 92 in 93 hybrid 2 came out called the dark side this allowed you to play with more players and it had some new rules too in 2001 they released a deluxe edition which combined the original hacker game as well as the

hacker 2 game so the objective was that you know the players act as hackers they compete against each other to control the most systems so basically you have cards and you lay the you lay the card down to create a network whenever you capture the systems you put tokens on those cards to indicate that they've been invaded now I haven't played this game so I really can't talk to it exactly but but seemed like a cool game it's a the original version was for three to six players it would usually last 90 minutes to two and a half hours to to play okay so this is just a bit more information about hacker 2 they

introduce it they introduce more security Concepts like viruses worms out dials for those people that can remember the whole War dialing thing and some other aspects to it so availability unfortunately it's out of print I went to the Steve Jackson game site and he has a link that I have there to all the out of print games or sites that sell or that specialize in out of current games um I went through every site and I could not find any of these games so I had a hard time finding it I've heard I actually gave this talk the other day uh and there was a gentleman in the audience saying that if if you know the

right folks you can get the original hacker and the hacker 2 game but the deluxe versions are very hard to come by um I did a quick write up on it if people want to check that out and kid review so I actually you know it was very hard to test this on my kids because you know I didn't have the game to really play with right so the next so the next game um was actually able to get this but it's called doxed it's card game slash board because you can dislike the hacker game you can lay the cards out and you flip them over to indicate that they've been hacked it was inspired by

the 2010 game forbidden island and the nice thing about this is it focuses on both sides both attack and as well as things that you can do from a defensive perspective too um and once again like hacker the objective is to teach non-techies computer security um so just a little bit about this um so you and up to three other players take the role of a lead hacker Syndicate infiltrating a network to reclaim valuable digital assets that have been stolen from them unfortunately the network the network admins are responding by patching their compromised machines raising alarms and actually changing the network too and the nice thing about this is It's a collaborative game so although all the players work

together to um defeat the network admins in this case to get their stolen data back all right so [Music] let's see here fine [Music]

so here's the thing where you lay the card down to create the network [Music]

so there's several types of cards loot decks and Patch decks and then they have the infocon level for those that are in the military they've probably heard of something like that

so there are various characters and they each have special skills so certain it's easier for them to do certain types of activities

[Music] foreign [Music] systems Honeypot Concepts [Music]

all right so availability of this the cool thing is this is something you can get off of GitHub so you can go to GitHub download it and they have instructions there on how to print it out and set it up or the gamecrafter which you'll hear me talk about a little later for 25 bucks you can get a box set so we actually got that we played that pubster what did you think of it I thought it was a pretty fun game I like how y'all lose together thank you all right any questions on that game has anyone ever played it well it's free you can just go download it and play it it's fun

all right next slide all right so the next one is one that you may have heard of control hack has anyone ever heard of that okay if you has anyone played it okay okay so this is another card game um so it's for three three to six players ages 14 plus takes about an hour to play this was announced at Defcon 2012. um and you can get it off you can just go over to amazon.com and search for control of hack and download it it was created by Tamara Denning Mr Kono and Adam showstack and once again the objective of this card game is to teach non-techies about computer security so here um is the tabletop game about white

hacking you and your fellow players work for a company called hackers Inc you use various skills that you have social engineering or your knowledge of networks to do various consulting services such as security so this is the video from blackpad it's about an hour long I'm not going to play it obviously but there's a YouTube link there and then also when I put the slides out you'll be able to have quick access to it or you could probably just go to YouTube and just search for your Control Alt hat black hat to find it um so like I said availability uh just head over to amazon.com and search for it I did a write-up on it if you want to

check that out and the kid review I did not really like I just kept on repeating and repeating and you only match things up for each round yeah yeah so this is um I I thought depending on the age group I think it's a little maybe met towards uh kids that are maybe a little older so but it's a game so it's something that we're going to try in a few more years to see if their perceptions changed right so then this is the final card game um before we get into the more fun games um but it is one called hackers in agents I was at a small conference called to Becon epilogue a few years

back and a friend of mine he goes by WIC him and his two kids were playing his card game there so so I sat down with with them and and it was just a really fun game so um so I thought I finally got around to buying it it's created by Jason Davis uh two to eight players they recommend 12 or age 12 plus it usually takes less than 30 minutes to do one round but this is very similar to Uno so you're so you play multiple rounds and then whenever somebody gets so many points then the game ends and then the person with the lowest number of points is the winner so in Uno you would have terms like skip

draw two reverse wild cards so what they actually do is they've changed some of those Concepts where they have in instead of skip they have encrypted and the um so there's the whole game itself but then there are these side challenges too and so in this case one of the sides challenges is that on the car there's encrypted text and there's a basic key into the children get get to just do some basic crypto analysis so that they can try to decode what's on the card there's the Draw 2 which in this game is equivalent to logs there's reverse which in this game is the equivalent to lead that allows you to either go like you can go

consecutively or you can reverse it it's up to you and then the wild cards this is where uh in this game instead of having a wild card they have sequel injection um the nice thing about this is on the car they are they they have actual SQL kind of kind of like your common example of SQL injection code and so as a parent you know you can kind of show this to your kid and talk them talk them through it and what that actually means or what the result of that type of uh SQL injection could be um they have the wild draw for so in hackers and agents they call that the rootkit and essentially this allows you

to what do they do make the other person or the next person pick up five and use yeah so in sort of four cars it's five cards and and you get to change the color as well and there's some other there's there's the hacker card which do you remember what that does swap with the other with the next person or whoever you want to same with the agents yeah so so basically if you have five cards and somebody has two it allows you to swap cards and then they also have number cards in the challenge there so this is just the number cards as they would be in Uno and the challenge there is that they actually

have the binary representation of the number on the card so the parent can sit down and work with the children to try to understand binary notation so the storyline with with this is that the world has been infiltrated with hackers who are up to steal your personal data if they can get their hands on it the agents are well armed with forensic techniques and sworn to catch the cyberpunks and so just like you know the philosophy is is that you want to be the first to get rid of all your cards so that you don't end up with any points after each round people add up their points whenever the first person gets to 300 points then the game ends and the

person with the lowest score wins

[Music] it's good

[Music]

[Music] foreign [Music]

so they also have this booster pack so that you can spend more money

it does add additional Concepts that you can learn from [Music]

all right so I said that I would mention the gamecrafter again so this is where I'm going to mention it so for 15 bucks you can go to thegamecrafter.com and um order this and get a tip to you so it's nine dollars for the threat booster pack so they also sell that and like I said there's just more rules more security Concepts that you can learn there so I did a write-up on it and kid review it was a fun game

yeah right so enough of the card games right so now we're gonna get into the video games or you know the the digital device games here so has anyone heard of the game called poem no one okay um so um this was released in March of 2013. it's designed by a company called 82 apps so the objective of this and and this is available on multiple platforms but we actually just used it on our iPhones and you can use it on the iPads too but you basically have various a grid of but but it doesn't have to be a grid per se it can be any shape like a diamond or whatever and then you have

the nodes that make that and then you start out on on one side and you're blue right just getting back to the whole Star Wars stuff you're blue and then the bad guy's red so you start on opposite sides of the grid and then your your goal is to take over the grid and rid the grid of the red guy in this case the nice thing too is but you have various tools along the way that you can use which we're going to talk about so you have things like Trojans viruses and spikes that you can use to both attack and defend your way through this grid thanks so kind of the storyline here is it's a

fast-paced computer hacking war against your cyberpunk Rivals like you were in a retro futuristic hockey movie but like I said there's things like viruses there's back doors there's encrypted nodes firewalls just a lot of different basic student creating Concepts that you can learn here

foreign

so in this case you just kind of have your basic grid but it's three-dimensional so you can actually kind of turn it you can have spheres [Music]

[Music]

[Music]

[Music] so they have a lot of characters in like in like most games each character has the special ability to do certain things faster you can play the computer directly play against other people or in this case they have this whole tournament play

[Music] so this is a pretty fun game I had this game for about a week and I just could not get the hang of it at all and then you know pupster gets on it and he literally beats it like that I'm like wow so I learned a lot from him in terms of how to play this game um so like I said you can get it on iOS or on any iOS device for about three bucks there's also a version for mac and I think there's an Android version now I did a write-up on it and what do you think of it Lobster I think it's probably my favorite game that we've done okay

all right thanks right next slide all right so the next game Uplink has anyone played Uplink or heard of Uplink before haven't so you've played it or you just heard okay yeah yeah so the original version actually came out in 2001. 1 for Windows and Linux and then a few years later they released it on valve Steam and then on to Ubuntu and then in 2012 they released the iOS version which is when we came across it so um it's your or this hacker and you go to this EBS board and people post missions there and based on what your skill level is you can choose missions and if you complete that mission then you get so much money and then you can

use that to upgrade your security hacking tools or um or or the speed of your link that you have to the the network so um so there's well all that's going on there's this back there's this back story it sort of reminds me of a kind of like an X-Files thing where um you know so as you're doing your missions you've you get this email about a deceased Uplink agent and then there there's a whole sort of story going on about that and you trying to figure that out were you able to get that far okay cool okay has anyone else played it yeah I did really I only got the second got that far I only got this I only got I

only got to the second one though okay so you got like the second email yeah the second one okay uh okay so this is the storyline so you play or sort of like what I just talked about you play an up like agent who makes a living by performing jobs for major corporations your tasks involve hacking into rival computer systems dealing research data sabotaging other companies laundering money erasing evidence streaming innocent people everything that you really want to teach your kids right so if you let your kids play this please emphasize that this is it's a game and if and if you do this in the real world you will be put in jail right

next slide all right so this is a fun video if anyone's seen it [Music]

[Music]

[Music]

[Music] thank you

so it's kind of like a cool game concept where you're bouncing through multiples nodes so it's harder to trace

[Music] and so you have different modules like this one as a password cracking one but you have to be very careful because you don't want to get detected too

[Music] [Music]

[Music] thank you [Music]

[Music] anyway that's just kind of a fun video next slide um so like I said you can get this on Windows and Linux systems Ubuntu just every everything that I talked about on the first slide there Unfortunately they don't have an iPhone version so if you want to do it on iOS you need like an iPad so it's five bucks there's a link to it there's also a version for the Mac if you want to check that out and I think by now there's an Android version and what's the kid review publisher I did not like it as much as I liked some of the other games because if you got Trace down two times

then you can't use your account anymore [Music] that wasn't fair so you you hear a pound and you log in but if you get caught too many times then then they kind of cut your link so you have to start over so he didn't like that all right thanks all right so the next game I think we're coming to the end here but we're close to the end with all the different or with the selection of games so there's a nice site called crypto Club um this was created by the University of Illinois as well as some of the partners that they had in this I have their original link their original site cryptoclub.math.uic.edu and then they

recently moved to cryptoclub.org there's still some stuff that's on the old site that I guess they decided not to migrate to the new site so I always give both here you know definitely start out at cryptoclub.org but you may also want to step back and go to their old site see if there's any other resources that you would find useful there but basically there are different courses that people can go through or that the kids can go through to learn basic crypto Concepts and then they have games and challenges which you which allow them to apply what they learn in just doing basic crypto analysis so so this is what it looks like or this is

what the new site looks like and you can see kind of on the left side there you know you can learn about what the ciphers are there's challenges games um anyway so there's some other things there Comics math and then there's also like if you look up at the top right you can actually log in and so you can store your things uh or store your or track your progress and then there's a teacher part of this too so this so a teacher of um in a school could assign stuff here excellent great so I'm not going to read this but this is just more detail on what it covers um and what was a kid review poster

[Music] it was a fun online game remember [Music] okay yeah so it was pretty cool I mean I was surprised when I mean I mean I learned years ago I I never really was into crypto when I was real young but you know learn the basic concepts I think in early conflict you know and he was going through and learning some of the basic crypto Concepts and then he was actually applying them out of it now the theory is is is is that I will uh like if I'm on travel or whatever I'll create like a some some cryptogram and then I'll send it to him and he has to decode it is yeah but his mom hasn't like I'll

usually text him to Mom and then Mom I guess never writes The Challenge down so but it's a fun game I really liked it I have a fun website and there's a lot of other websites out there like that um it seems like this is more uh the crypto Club site was more the cream of cream of the crop so it seemed to be the best one out there but there's hundreds of sites out there that teach and allow you to apply basic crypto Concepts but you know this is a great one to start with so some other games and um that we've looked at there's the NSA crypto challenge which was sort of like the crypto Club site

so you you'd like that right yeah yeah and then just um in terms of just focusing on programming um there's been Adventures has anyone ever played that yeah so it's this Zelda like game and it's pretty cool you can go through it and it teaches you how to use VI or Vim so I think up I think it's up to about 13 levels now it's a really fun fun game I recommend just going to vimadventures.com or you can search for it it's you know fun and and does anybody know why we want to learn VI or vin what so I heard somebody say it doesn't matter where you go well at least on a Linux or Unix system you know it's you

will always have VI or Vim um some other areas that we looked at especially at a younger age teaching just basic Computer Concepts maybe some programming Concepts so from an operating system perspective there's chemo which is great for young kids I think he started it probably when I don't know probably like about three three years old so that's a great operating system that you can start with it teaches you about basic Computer Concepts plenty of games and fun things to learn from at more of a I would say Elementary level there's edubuntu so that's an educational distro based on Ubuntu so same type things but it's just geared towards kids that are a little older

from a programming perspective there's scratch and scratch seems to be the go-to language the nice thing about that is you can go to the scratched site now you don't even have to install any software on your computer it's basically all I don't know if it's flash but it's basically all built in into the browser so you've built a few things there right yeah did you like scratch yeah and and scratch version 2.0 is online but version 1.0 you have to download so uh and then there's a good book which I think I mentioned a little further down or at least I think it's on the next slide where it's there's a good scratch programming book it gives them

projects to work on and they basically go through this whole book and they build this scheme and and it's great just teaching the basic programming constructs you know Loops variables counters all all that sort of basic stuff Has anyone used logo in in terms of learning is anyone use logo here I haven't I mean that's from the little from the research that we did that that's going to be the second best or the second preferred one but I haven't really had a chance to try it out um conferences and presentations there's a gentleman that I was talking to a little earlier we were talking about you know specifically hat kid um so that goes on they either have one

or two conferences per year so those are fun conferences for kids to go to I think it's in the age range it's geared towards um like some of the other ones that I have here I think it's geared towards older children you can probably take like a four or five-year-old to have kid and they can get something out of it fun projects and then hack for kids it actually starts at age five and it I don't know they go up to they say from the age five to like 25 but I wouldn't consider a 25 year old like a kid but but the nice thing about this is It's You know the kids present it's you know the parent

goes but the kids actually do all the presentations and run all the workshops as well so there's Defcon kids which now they're calling Roots Asylum so if you go to Vegas um there's this separate kid track that's away from the Defcon activities so they can have fun there um in terms of presentations just I've been tracking these so at the time he was eight years old there's a little kid Reuben Paul so he's been giving a presentation like this at several conferences I actually saw this at the ISC Square World Congress but teaching kids cyber security so it's a very polished kid he's he's the CEO of his own company he's produced several games so

definitely something to check out and then by Reese and I'm not even going to try to pronounce that go orlish is that how you say that you said you would I know I said I wouldn't try to pronounce it and then I pronounced it thank you um but she gave a nice presentation at I saw the recorded version from besides Chicago called Minecraft security and she basically had these competitions with her dad and so she learned some basic security concepts of how to defend yourself in Minecraft so things like defensive depth honeypots just just security Concepts like that it's like a 15-minute video so it's a fun watch

um so just some other resources here books podcasts and blogs so there's an event with python.com has some free resources probably the one most relevant to this audience is there's hacking secret ciphers with python and then they have some other ones that are game related to maybe as kids that are a little older learn the basics of python these are some other books that they can follow to um learn more about python their super scratch programming inventor which is the one that I was talking about on the previous slide so that's a great book to start out with I mean it's pretty simple because you basically create an account on this website log into it and then you

have this book you just sort of follow through the book so it's a fun fun site there's also python for kids and then podcasts I haven't really found that much I know if anybody knows Rob Fuller or he's known as mubix he did one episode a few months back called hacker Tykes and it was you know a really so him and his two kids basically it was a really fun podcast but he hasn't put anything out so maybe we should all you know on Twitter is week and tweet it and music saying Hey when's the next hacker takes podcast going to come out so it can encourage him there um curriculums and competitions this is

geared maybe a little later I was talking with a few folks here about cyber Patriot it's geared mainly at the high school level they do have some programs at the middle school level and they're talking about doing something at the elementary school level so basically they form teams and there's competitions and doing cyber type stuff there's cyber Aces which is I think it's associated with Sans and they have modules for online learning and then there's challenges associated with it there's hacker High School which is a curriculum that somebody put together just really really good resource you know learning all the basics you know like a great security Foundation [Music] um uh you know about different operating

systems and the capabilities and the commands that you need so that you can do analysis or cyber security work so you're learning things so the win like Windows and all the net commands and all the cool Linux commands that you can use to so definitely recommend checking that out there's also the site request challenges which are geared towards high school college students and those come out once or twice a year I think if you go to cyberquest.com or not.com just search on set requests they just released their April Challenge and they only happened twice per year and I think you have to register by I don't know April 20th or but you definitely want to check that out

because you can go in there and you register for it you download artifacts you do your analysis on this artifacts and then you submit them and then they rank folks and if you're I mean I did it just because it's fun but they actually for students they have a or for the top performing students they'll they have a camp that everybody can go to as well and then at the Collegiate level there's obviously things like CCBC so and like I was saying earlier there's some younger folks here you know definitely get I mean if you know you want to get into the cyber security career field going through college you can get a cyber degree per se but getting involved

with these the seams will um you know just offer you experiences that you will never get just going through a traditional degree program [Music] so so where does this all come to um it's basically this kid hack project and it's you know over the past two to three years been slowly putting it together getting finding new games reviewing them testing them out with puffster and his sister and seeing what they like and writing about them and and just sort of cataloging them all on this page I would go back one time right so the general way that that I'm breaking things down here is I have the general categories of how I'm putting them out so we have games

computers and programming conferences presentations books podcasts and blogs and create curriculum some competitions so those are the areas um that I'm breaking things down into currently um so what so what's next and there's my puppy picture

all right so one of the things I wanted to do is you know done all this research but and they're all kind of just put on this webpage but I wanted to put together something that would help parents say all right well my kids this old what can I do and so this is I guess draft one I actually just publicly released this yesterday at peace um well I wouldn't say I publicly released it as the first time I showed it but but maybe somebody took a picture and they published it on Twitter and uh um so basically those five categories that I talked about and I tried to break them down by age group

and just have this overall layout there so I'm trying to you know get this as filled up as possible and I I think I'm gonna I'm gonna you know take take this grid and I'm going to put it on the the hapkid project page with with links to the all the different blog posts that we've written out the scary thing is there's a lot of things here that I haven't even looked at yet so there's some like you know every other day somebody sends me oh check out this game check out that game and then even since since you read about all the hacking in the news now game developers for like the iOS I mean you go into the

App Store and you type hacker and there's like all these games but um but I haven't really they're they're I've been found too many good ones that would teach the concepts that you need to lay that Foundation which is the goal of this project makes it um so some other stuff is you know maybe doing some sort of an Effectiveness survey still trying to figure out how I would do this but just have a survey where you're trying to get just general demographic information get their prior cyber experience you know other games they've played school programs that they've been involved in and then and then really focus in on the each game and time spent playing that game and

trying to rank what they got out of that game you know from General hey was this fun would you play again to maybe figuring out if how much knowledge they've gained in some of the basic security Concepts such as firewalls encryption malware or what all those things mean and just sort of putting this all together so that we can you know do do more I wouldn't call it scientific per se but do more of a scientific ish type study of all these games in the age groups that they're most appropriate for [Music] um so I'll also like I said I'm always finding new games reviewing them blogging about them trying to add them to the GitHub project I'm always looking

for contributions so you can go on the kid hack page which is I just have a short bitly link there it's a kit hack if you want to get to it quick and you can add you know suggestions there with comments or if you have a comment on this on a specific game then I'll try to integrate those comments with attribution up to where we talk about the games and then I also have the contact us form so nisp because the site used to be Nova infosec portal so that's where this came from uh contact so you can go there or you can go to know that in infosec.com and click the contact us button and fill out

that form too or if you want to reach me directly and I usually don't put my email on the slides but it's just grex grecs at you know the infosec.com so basically that's what we have in terms of all the content this is what we covered next slide um so we have the Twitter my Twitter and his Twitter which he doesn't have the password to because he's not allowed to um the website uh and the contact thing if you have any questions about this or if you're interested in talking to me about doing any Consulting type activities just let me know are there any questions yes have you heard of the MIT app

s scratch but you actually have AI okay so so it's at inventor and so the MIT App Inventor no I I I haven't checked that out but that's something so yeah I'll definitely check that out so it's for developing apps on Android right right like a lot of the parts of that project character okay cool any other questions code academy yes yeah [Music] is that the one hour code thing is are they associated with that and so so she mentioned code academy so that's a good place to start out so that's good now I have to remember he has a better memory than I do right so remember code academy [Music] an App Inventor right okay

any other questions or comments all right um um oh all right yeah why did you do that I don't know here get it get it going all right this is this is the funniest thing you have to go all the way down I'll do it uh well you have to go through that again I don't care all right we [Music] whoops all right I know I know what to do

[ feedback ]