https://github.com/Karneades/awesome-security-card-games

A curated list of security card games.
https://github.com/Karneades/awesome-security-card-games

List: awesome-security-card-games

application-security awesome awesome-list card-game cryptography education educational-game incident-response threat-modeling

Last synced: 9 days ago
JSON representation

A curated list of security card games.

• Host: GitHub
• URL: https://github.com/Karneades/awesome-security-card-games
• Owner: Karneades
• License: cc0-1.0
• Created: 2020-04-09T09:51:02.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2023-06-13T19:05:29.000Z (over 1 year ago)
• Last Synced: 2024-05-21T13:16:48.821Z (7 months ago)
• Topics: application-security, awesome, awesome-list, card-game, cryptography, education, educational-game, incident-response, threat-modeling
• Homepage:
• Size: 40 KB
• Stars: 90
• Watchers: 5
• Forks: 9
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Code of conduct: code-of-conduct.md

Awesome Lists containing this project

• awesome - Security Card Games - Train your skills and discuss various security topics. (Security)
• fucking-awesome - Security Card Games - Train your skills and discuss various security topics. (Security)
• awesome - Security Card Games - Train your skills and discuss various security topics. (Security)

README

        
# Awesome Security Card Games [![Awesome](https://awesome.re/badge.svg)](https://github.com/sindresorhus/awesome)

> A curated list of security card games (which are sometimes known as tabletop exercises).

Security card games help train your skills and enable discussions for various areas of security.

## Contents

- [Application Security](#application-security)

- [Cryptography](#cryptography)

- [Data Privacy](#data-privacy)

- [Incident Response](#incident-response)

- [Threat Modeling](#threat-modeling)

- [Various Resources](#various-resources)

## Application Security

- [Cornucopia](https://www.owasp.org/index.php/OWASP_Cornucopia) - A card game based on OWASP's Top 10 (authentication, data Validation etc.). The [card deck](https://www.owasp.org/images/7/71/Owasp-cornucopia-ecommerce_website.pdf) is available as PDF from OWASP.

## Cryptography

- [Crypto Go](https://www.cryptogogame.com/EN) - An educational card game designed to teach up to date 

  symmetric cryptography. Crypto Go deck consists of cards representing modern cryptographic tools.

## Data Privacy

- [Know your risks](https://aca.edu.au/resources/cyber-sharing-cards/) - Learn what information is safe to share online and understand the risks. Learn about whether to share, not share or be cautious with different pieces of information.

## Incident Response

- [Backdoors & Breaches](https://www.blackhillsinfosec.com/projects/backdoorsandbreaches/) - An incident response card game. It helps you conduct incident response tabletop exercises and learn attack tactics, tools, and methods.

- [Defensomania](https://github.com/Karneades/Defensomania) - An incident response card game for security monitoring and incident response teams to discuss priorities, possible response actions and attack scenarios.

## Threat Modeling

- [Elevation of Privilege (EOP) by Microsoft](https://web.archive.org/web/20150312215303/http://www.microsoft.com/security/sdl/adopt/eop.aspx) - A card game based on Microsoft's threat modeling framework "STRIDE" (Spoofing, Tampering etc.). The [card deck](https://www.microsoft.com/en-us/download/details.aspx?id=20303) is available as PDF from Microsoft. Adam Shostack, the author of EoP has also a [git repo](https://github.com/adamshostack/eop/) for EoP.

- [Security Cards](http://securitycards.cs.washington.edu/index.html) - A card game encouraging to think broadly and creatively about computer security threats. Four dimensions are covered: Human Impact, Adversary's Motivations, Adversary's Resources, Adversary's Methods.

- [Cumulus](https://github.com/TNG/cumulus) - A threat modeling card game for the clouds which helps you find threats to your DevOps or cloud project and teaches developers a security oriented mindset.

## Various Resources

- [Tabletop Security Games & Cards](https://adam.shostack.org/games.html) - List of security card games created and maintained by Adam Shostack.

- [Tabletop Simulations to Improve Your Information Security Program](https://redcanary.com/blog/using-tabletop-simulations-to-improve-information-security/) - Red Canary's write-up about tabletop exercises for information security programs.

- [Game On: Tabletop Games to Teach Cyber and Information Security Concepts](https://www.linkedin.com/pulse/game-tabletop-games-teach-cyber-information-security-mike-mcgannon) - List of tabletop games to teach cyber and information security concepts.

## Contributing

Contributions welcome! Read the [contribution guidelines](CONTRIBUTING.md) first.