{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T15:33:38Z","timestamp":1781710418322,"version":"3.54.5"},"reference-count":78,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2026,1,22]],"date-time":"2026-01-22T00:00:00Z","timestamp":1769040000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,22]],"date-time":"2026-01-22T00:00:00Z","timestamp":1769040000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"Research Development Fund (Xi'an Jiaotong-Liverpool University","award":["RDF-24-02-024"],"award-info":[{"award-number":["RDF-24-02-024"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2026,2]]},"DOI":"10.1007\/s10207-025-01193-y","type":"journal-article","created":{"date-parts":[[2026,1,22]],"date-time":"2026-01-22T14:18:43Z","timestamp":1769091523000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["From Prey to Protect: Exploring Social Engineering Through Games and Simulation. Trust, Awareness, and Phishing Defense"],"prefix":"10.1007","volume":"25","author":[{"given":"Affan","family":"Yasin","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rubia","family":"Fatima","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ira","family":"Puspitasari","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Abdul Basit","family":"Dogar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Liu","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kashif","family":"Ishaq","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,1,22]]},"reference":[{"key":"1193_CR1","doi-asserted-by":"publisher","first-page":"179","DOI":"10.1016\/j.infsof.2017.12.002","volume":"95","author":"A Yasin","year":"2018","unstructured":"Yasin, A., Liu, L., Li, T., Wang, J., Zowghi, D.: Design and preliminary evaluation of a cyber security requirements education game (sreg). Inf. Softw. Technol. 95, 179\u2013200 (2018). https:\/\/doi.org\/10.1016\/j.infsof.2017.12.002","journal-title":"Inf. Softw. Technol."},{"key":"1193_CR2","doi-asserted-by":"publisher","unstructured":"Fatima, R., Yasin, A., Liu, L., Wang, J.: What should abeeha do? an activity for phishing awareness. In: 2022 IEEE 22nd International Conference on Software Quality, Reliability, and Security Companion (QRS-C), pp. 756\u2013757 (2022). https:\/\/doi.org\/10.1109\/QRS-C57518.2022.00120","DOI":"10.1109\/QRS-C57518.2022.00120"},{"issue":"10","key":"1193_CR3","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1016\/S1361-3723(21)00108-1","volume":"2021","author":"A Yasin","year":"2021","unstructured":"Yasin, A., Fatima, R., Liu, L., Wanga, J., Ali, R., Wei, Z.: Counteracting social engineering attacks. Computer Fraud & Security 2021(10), 15\u201319 (2021). https:\/\/doi.org\/10.1016\/S1361-3723(21)00108-1","journal-title":"Computer Fraud & Security"},{"key":"1193_CR4","doi-asserted-by":"publisher","DOI":"10.1016\/J.JISA.2019.06.007","volume":"48","author":"R Fatima","year":"2019","unstructured":"Fatima, R., Yasin, A., Liu, L., Wang, J., Afzal, W., Yasin, A.: Sharing information online rationally: An observation of user privacy concerns and awareness using serious game. J. Inf. Secur. Appl. 48, 102351 (2019). https:\/\/doi.org\/10.1016\/J.JISA.2019.06.007","journal-title":"J. Inf. Secur. Appl."},{"issue":"4","key":"1193_CR5","doi-asserted-by":"publisher","first-page":"161","DOI":"10.1002\/spy2.161","volume":"4","author":"A Yasin","year":"2021","unstructured":"Yasin, A., Fatima, R., Liu, L., Wang, J., Ali, R., Wei, Z.: Understanding and deciphering of social engineering attack scenarios. SECURITY AND PRIVACY 4(4), 161 (2021). https:\/\/doi.org\/10.1002\/spy2.161","journal-title":"SECURITY AND PRIVACY"},{"issue":"4","key":"1193_CR6","doi-asserted-by":"publisher","first-page":"662","DOI":"10.1002\/asi.20779","volume":"59","author":"M Workman","year":"2008","unstructured":"Workman, M.: Wisecrackers: A theory-grounded investigation of phishing and pretext social engineering threats to information security. J. Am. Soc. Inform. Sci. Technol. 59(4), 662\u2013674 (2008)","journal-title":"J. Am. Soc. Inform. Sci. Technol."},{"issue":"10","key":"1193_CR7","doi-asserted-by":"publisher","first-page":"1014","DOI":"10.1080\/0144929X.2013.763860","volume":"32","author":"P Tetri","year":"2013","unstructured":"Tetri, P., Vuorinen, J.: Dissecting social engineering. Behaviour & Information Technology 32(10), 1014\u20131023 (2013)","journal-title":"Behaviour & Information Technology"},{"issue":"1","key":"1193_CR8","first-page":"1","volume":"8","author":"SM Albladi","year":"2018","unstructured":"Albladi, S.M., Weir, G.R.: User characteristics that influence judgment of social engineering attacks in social networks. HCIS 8(1), 1\u201324 (2018)","journal-title":"HCIS"},{"issue":"1","key":"1193_CR9","first-page":"17","volume":"6","author":"A Karakasiliotis","year":"2007","unstructured":"Karakasiliotis, A., Furnell, S., Papadaki, M.: An assessment of end-user vulnerability to phishing attacks. Journal of Information Warfare 6(1), 17\u201328 (2007)","journal-title":"Journal of Information Warfare"},{"key":"1193_CR10","doi-asserted-by":"crossref","unstructured":"Parsons, K., McCormac, A., Pattinson, M., Butavicius, M., Jerram, C.: Phishing for the truth: A scenario-based experiment of users\u2019 behavioural response to emails. In: Security and Privacy Protection in Information Processing Systems: 28th IFIP TC 11 International Conference, SEC 2013, Auckland, New Zealand, July 8-10, 2013. Proceedings 28, pp. 366\u2013378 (2013). Springer","DOI":"10.1007\/978-3-642-39218-4_27"},{"key":"1193_CR11","doi-asserted-by":"publisher","unstructured":"Li, T., Liu, L., Elahi, G., Yu, E.S.K., Bryant, B.R.: Service security analysis based on i*: An approach from the attacker viewpoint. In: Workshop Proceedings of the 34th Annual IEEE International Computer Software and Applications Conference, COMPSAC Workshops 2010, Seoul, Korea, 19-23 July 2010, pp. 127\u2013133. IEEE Computer Society, ??? (2010). https:\/\/doi.org\/10.1109\/COMPSACW.2010.98","DOI":"10.1109\/COMPSACW.2010.98"},{"key":"1193_CR12","doi-asserted-by":"crossref","unstructured":"Endsley, M.R., Jones, D.G.: Designing for Situation Awareness: An Approach to User-centered Design. CRC press, ??? (2025)","DOI":"10.1201\/9781003388234"},{"key":"1193_CR13","doi-asserted-by":"crossref","unstructured":"Deterding, S., Sicart, M., Nacke, L., O\u2019hara, K., Dixon, D.: Gamification. using game-design elements in non-gaming contexts. In: CHI\u201911 Extended Abstracts on Human Factors in Computing Systems, pp. 2425\u20132428 (2011)","DOI":"10.1145\/1979742.1979575"},{"key":"1193_CR14","unstructured":"Triantafyllou, S.A., Georgiadis, C., Sapounidis, T.: Gamification in education and training: A literature review. International Review of Education, 1\u201335 (2025)"},{"key":"1193_CR15","doi-asserted-by":"crossref","unstructured":"Pacheco, F.: Cybersecurity incident response tabletop simulations for learning in classrooms and organizations (2022)","DOI":"10.36227\/techrxiv.20317416"},{"issue":"1","key":"1193_CR16","doi-asserted-by":"publisher","first-page":"005","DOI":"10.1093\/cybsec\/tyab005","volume":"7","author":"H Kavak","year":"2021","unstructured":"Kavak, H., Padilla, J.J., Vernon-Bido, D., Diallo, S.Y., Gore, R., Shetty, S.: Simulation for cybersecurity: state of the art and future directions. Journal of Cybersecurity 7(1), 005 (2021)","journal-title":"Journal of Cybersecurity"},{"issue":"1\u20132","key":"1193_CR17","doi-asserted-by":"publisher","first-page":"65","DOI":"10.1080\/23742917.2022.2059323","volume":"6","author":"M El-Genk","year":"2022","unstructured":"El-Genk, M., Schriener, T.: A cybersecurity platform for simulating transient responses of emulated programmable logic controllers in instrumentation and control systems for a pwr plant. Journal of Cyber Security Technology 6(1\u20132), 65\u201390 (2022)","journal-title":"Journal of Cyber Security Technology"},{"key":"1193_CR18","unstructured":"Bacud, M.L., M\u00e4ses, S.: Game-based learning for cybersecurity awareness training programmes in the public sector. In: ECEL 2021 20th European Conference on e-Learning, p. 50 (2021). Academic Conferences International limited"},{"key":"1193_CR19","doi-asserted-by":"publisher","first-page":"436","DOI":"10.1016\/j.future.2021.05.033","volume":"124","author":"Z Rashid","year":"2021","unstructured":"Rashid, Z., Noor, U., Altmann, J.: Economic model for evaluating the value creation through information sharing within the cybersecurity information sharing ecosystem. Futur. Gener. Comput. Syst. 124, 436\u2013466 (2021)","journal-title":"Futur. Gener. Comput. Syst."},{"key":"1193_CR20","doi-asserted-by":"crossref","unstructured":"Tioh, J.-N., Mina, M., Jacobson, D.W.: Cyber security social engineers an extensible teaching tool for social engineering education and awareness. In: 2019 IEEE Frontiers in Education Conference (FIE), pp. 1\u20135 (2019). IEEE","DOI":"10.1109\/FIE43999.2019.9028369"},{"key":"1193_CR21","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1016\/j.cose.2016.03.004","volume":"59","author":"F Mouton","year":"2016","unstructured":"Mouton, F., Leenen, L., Venter, H.S.: Social engineering attack examples, templates and scenarios. Computers & Security 59, 186\u2013209 (2016)","journal-title":"Computers & Security"},{"issue":"4","key":"1193_CR22","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1002\/spy2.73","volume":"2","author":"A Yasin","year":"2019","unstructured":"Yasin, A., Fatima, R., Liu, L., Yasin, A., Wang, J.: Contemplating social engineering studies and attack scenarios: A review study. SECURITY AND PRIVACY 2(4), 73 (2019). https:\/\/doi.org\/10.1002\/spy2.73","journal-title":"SECURITY AND PRIVACY"},{"issue":"1","key":"1193_CR23","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2024.103928","volume":"62","author":"T Rathod","year":"2025","unstructured":"Rathod, T., Jadav, N.K., Tanwar, S., Alabdulatif, A., Garg, D., Singh, A.: A comprehensive survey on social engineering attacks, countermeasures, case study, and research challenges. Information Processing & Management 62(1), 103928 (2025). https:\/\/doi.org\/10.1016\/j.ipm.2024.103928","journal-title":"Information Processing & Management"},{"key":"1193_CR24","doi-asserted-by":"crossref","unstructured":"Khan, R., McLaughlin, K., Laverty, D., Sezer, S.: Stride-based threat modeling for cyber-physical systems. In: 2017 IEEE PES Innovative Smart Grid Technologies Conference Europe (ISGT-Europe), pp. 1\u20136 (2017). IEEE","DOI":"10.1109\/ISGTEurope.2017.8260283"},{"key":"1193_CR25","doi-asserted-by":"crossref","unstructured":"Gadyatskaya, O., Papuc, D.: Chatgpt knows your attacks: Synthesizing attack trees using llms. In: International Conference on Data Science and Artificial Intelligence, pp. 245\u2013260 (2023). Springer","DOI":"10.1007\/978-981-99-7969-1_18"},{"issue":"1","key":"1193_CR26","doi-asserted-by":"publisher","first-page":"34","DOI":"10.1007\/s00766-004-0194-4","volume":"10","author":"G Sindre","year":"2005","unstructured":"Sindre, G., Opdahl, A.L.: Eliciting security requirements with misuse cases. Requirements Eng. 10(1), 34\u201344 (2005). https:\/\/doi.org\/10.1007\/s00766-004-0194-4","journal-title":"Requirements Eng."},{"key":"1193_CR27","doi-asserted-by":"publisher","first-page":"175","DOI":"10.1007\/3-540-45547-7_11","volume-title":"Trust in Cyber-societies","author":"E Yu","year":"2001","unstructured":"Yu, E., Liu, L.: Modelling trust for system design using the i* strategic actors framework. In: Falcone, R., Singh, M., Tan, Y.-H. (eds.) Trust in Cyber-societies, pp. 175\u2013194. Springer, Berlin, Heidelberg (2001)"},{"key":"1193_CR28","doi-asserted-by":"publisher","unstructured":"Yu, E.S.: In: Borgida, A.T., Chaudhri, V.K., Giorgini, P., Yu, E.S. (eds.) Social Modeling and i*, pp. 99\u2013121. Springer, Berlin, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-642-02463-4_7","DOI":"10.1007\/978-3-642-02463-4_7"},{"key":"1193_CR29","unstructured":"Tisue, S., Wilensky, U.: Netlogo: A simple environment for modeling complexity. In: International Conference on Complex Systems, vol. 21, pp. 16\u201321 (2004). Citeseer"},{"key":"1193_CR30","doi-asserted-by":"publisher","unstructured":"Amblard, F., Daud\u00e9, E., Gaudou, B., Grignard, A., Hutzler, G., Lang, C., Marilleau, N., Nicod, J.-M., Sheeren, D., Taillandier, P.: 3 - introduction to netlogo. In: Banos, A., Lang, C., Marilleau, N. (eds.) Agent-based Spatial Simulation with Netlogo, pp. 75\u2013123. Elsevier, Oxford (2015).https:\/\/doi.org\/10.1016\/B978-1-78548-055-3.50003-4 . https:\/\/www.sciencedirect.com\/science\/article\/pii\/B9781785480553500034","DOI":"10.1016\/B978-1-78548-055-3.50003-4"},{"issue":"6","key":"1193_CR31","doi-asserted-by":"publisher","first-page":"581","DOI":"10.3233\/JCS-181253","volume":"27","author":"R Fatima","year":"2019","unstructured":"Fatima, R., Yasin, A., Liu, L., Wang, J.: How persuasive is a phishing email? a phishing game for phishing awareness. J. Comput. Secur. 27(6), 581\u2013612 (2019)","journal-title":"J. Comput. Secur."},{"key":"1193_CR32","doi-asserted-by":"publisher","unstructured":"Fatima, R., Yasin, A., Liu, L., Jianmin, W.: Strategies for counteracting social engineering attacks. Computer Fraud & Security 2022(7), (2022) https:\/\/doi.org\/10.12968\/S1361-3723(22)70583-0 https:\/\/doi.org\/10.12968\/S1361-3723(22)70583-0","DOI":"10.12968\/S1361-3723(22)70583-0"},{"key":"1193_CR33","doi-asserted-by":"crossref","unstructured":"Fatima, R., Yasin, A., Liu, L., Wang, J.: What should abeeha do? an activity for phishing awareness. In: 2022 IEEE 22nd International Conference on Software Quality, Reliability, and Security Companion (QRS-C), pp. 756\u2013757 (2022). IEEE","DOI":"10.1109\/QRS-C57518.2022.00120"},{"key":"1193_CR34","doi-asserted-by":"publisher","first-page":"179","DOI":"10.1016\/j.infsof.2017.12.002","volume":"95","author":"A Yasin","year":"2018","unstructured":"Yasin, A., Liu, L., Li, T., Wang, J., Zowghi, D.: Design and preliminary evaluation of a cyber security requirements education game (sreg). Inf. Softw. Technol. 95, 179\u2013200 (2018)","journal-title":"Inf. Softw. Technol."},{"key":"1193_CR35","doi-asserted-by":"crossref","unstructured":"Yasin, A., Fatima, R., Liu, L., Wang, J., Ali, R.: Understanding social engineers strategies from the perspective of sun-tzu philosophy. In: 2020 IEEE 44th Annual Computers, Software, and Applications Conference (COMPSAC), pp. 1773\u20131776 (2020). IEEE","DOI":"10.1109\/COMPSAC48688.2020.00045"},{"key":"1193_CR36","doi-asserted-by":"publisher","unstructured":"Beckers, K., Pape, S.: A serious game for eliciting social engineering security requirements. In: 24th IEEE International Requirements Engineering Conference, RE 2016, Beijing, China, September 12-16, 2016, pp. 16\u201325. IEEE Computer Society, ??? (2016). https:\/\/doi.org\/10.1109\/RE.2016.39","DOI":"10.1109\/RE.2016.39"},{"key":"1193_CR37","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2021.106930","volume":"124","author":"KF Steinmetz","year":"2021","unstructured":"Steinmetz, K.F., Pimentel, A., Goe, W.R.: Performing social engineering: A qualitative study of information security deceptions. Comput. Hum. Behav. 124, 106930 (2021). https:\/\/doi.org\/10.1016\/j.chb.2021.106930","journal-title":"Comput. Hum. Behav."},{"key":"1193_CR38","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2019.06.007","volume":"48","author":"R Fatima","year":"2019","unstructured":"Fatima, R., Yasin, A., Liu, L., Wang, J., Afzal, W., Yasin, A.: Sharing information online rationally: An observation of user privacy concerns and awareness using serious game. Journal of Information Security and Applications 48, 102351 (2019)","journal-title":"Journal of Information Security and Applications"},{"issue":"10","key":"1193_CR39","doi-asserted-by":"publisher","first-page":"6430","DOI":"10.1080\/10494820.2023.2265424","volume":"32","author":"J Henriksen-Bulmer","year":"2024","unstructured":"Henriksen-Bulmer, J., Rosenorn-Lanng, E., Corbin-Clarke, S., Ware, S., Melacca, D., Fenge, L.-A.: Using game-based learning to teach young people about privacy and online safety. Interact. Learn. Environ. 32(10), 6430\u20136450 (2024)","journal-title":"Interact. Learn. Environ."},{"key":"1193_CR40","doi-asserted-by":"crossref","unstructured":"Mollazehi, A., AbuelezzIsraa, Barhamgi, M., Khan, K.M., Ali, R.: Do cialdini\u2019s persuasion principles still influence trust and risk-taking when social engineering is knowingly possible? In: Ara\u00fajo, J., Vara, J.L., Santos, M.Y., Assar, S. (eds.) Research Challenges in Information Science. Lecture Notes in Business Information Processing, vol. 513. Springer, ??? (2024)","DOI":"10.1007\/978-3-031-59465-6_17"},{"key":"1193_CR41","doi-asserted-by":"crossref","unstructured":"Muhanad, A., Abuelezz, I., Khan, K.M., Ali, R.: On how cialdini\u2019s persuasion principles influence individuals in the context of social engineering: A qualitative study. In: Barhamgi, M., Wang, H., Wang, X. (eds.) Web Information Systems Engineering \u2013 WISE 2024. Lecture Notes in Computer Science, vol. 15438. Springer, ??? (2025)","DOI":"10.1007\/978-981-96-0570-5_27"},{"key":"1193_CR42","doi-asserted-by":"publisher","unstructured":"Abuelezz, I., Barhamgi, M., Houki, Z.E., Khan, K.M., Ali, R.: Qualitative exploration of factors influencing trust and engagement in social engineering: The role of visual and demographic cues. In: 2024 11th International Conference on Behavioural and Social Computing (BESC), pp. 1\u20138 (2024). https:\/\/doi.org\/10.1109\/BESC64747.2024.10780719","DOI":"10.1109\/BESC64747.2024.10780719"},{"issue":"10","key":"1193_CR43","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1016\/S1361-3723(21)00108-1","volume":"2021","author":"A Yasin","year":"2021","unstructured":"Yasin, A., Fatima, R., Liu, L., Wanga, J., Ali, R., Wei, Z.: Counteracting social engineering attacks. Computer Fraud & Security 2021(10), 15\u201319 (2021)","journal-title":"Computer Fraud & Security"},{"issue":"07","key":"1193_CR44","first-page":"2018","volume":"13","author":"L Liu","year":"2018","unstructured":"Liu, L., Yasin, A., Li, T., Fatima, R., Wang, J.: Improving software security awareness using a serious game. IET Software 13(07), 2018 (2018)","journal-title":"IET Software"},{"issue":"8","key":"1193_CR45","doi-asserted-by":"publisher","first-page":"1064","DOI":"10.1080\/10494820.2019.1570279","volume":"28","author":"TH Morris","year":"2020","unstructured":"Morris, T.H.: Experiential learning-a systematic review and revision of kolb\u2019s model. Interact. Learn. Environ. 28(8), 1064\u20131077 (2020)","journal-title":"Interact. Learn. Environ."},{"key":"1193_CR46","doi-asserted-by":"publisher","DOI":"10.4324\/9781351058513","volume-title":"Cognitive Psychology: A Student\u2019s Handbook","author":"MW Eysenck","year":"2020","unstructured":"Eysenck, M.W., Keane, M.T.: Cognitive Psychology: A Student\u2019s Handbook. Psychology press, ??? (2020)"},{"issue":"1","key":"1193_CR47","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40561-020-00118-7","volume":"7","author":"JAN Ansari","year":"2020","unstructured":"Ansari, J.A.N., Khan, N.A.: Exploring the role of social media in collaborative learning the new domain of learning. Smart Learning Environments 7(1), 1\u201316 (2020)","journal-title":"Smart Learning Environments"},{"key":"1193_CR48","doi-asserted-by":"crossref","unstructured":"Meeplat, N.: A model of creativity based learning for computer teaching to enhance creative skills of undergraduate students. In: Proceedings of the 2020 the 3rd International Conference on Computers in Management and Business, pp. 184\u2013188 (2020)","DOI":"10.1145\/3383845.3383881"},{"key":"1193_CR49","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1016\/j.cose.2016.03.004","volume":"59","author":"F Mouton","year":"2016","unstructured":"Mouton, F., Leenen, L., Venter, H.S.: Social engineering attack examples, templates and scenarios. Computers & Security 59, 186\u2013209 (2016). https:\/\/doi.org\/10.1016\/j.cose.2016.03.004","journal-title":"Computers & Security"},{"key":"1193_CR50","unstructured":"Yasin, A., Fatima, R., JiangBin, Z., Ali\u00a0Khan, J., Ali\u00a0Khan, A.: Gamifying requirements: An empirical analysis of game-based technique for novices. Journal of Software: Evolution and Process, 2617"},{"issue":"6","key":"1193_CR51","doi-asserted-by":"publisher","first-page":"564","DOI":"10.1049\/iet-sen.2018.5379","volume":"13","author":"R Fatima","year":"2019","unstructured":"Fatima, R., Yasin, A., Liu, L., Wang, J., Afzal, W., Yasin, A.: Improving software requirements reasoning by novices: a story-based approach. IET Software 13(6), 564\u2013574 (2019)","journal-title":"IET Software"},{"key":"1193_CR52","unstructured":"Yasin, A., Fatima, R., Ali\u00a0Khan, J., Liu, L., Ali, R., Wang, J.: Counteracting sociocultural barriers in global software engineering using group activities. Journal of Software: Evolution and Process, 2587"},{"key":"1193_CR53","doi-asserted-by":"crossref","unstructured":"Azbaki, O., Hagal, M.A., Ramadhan, A.R.: Ishikawa model for improving the use of brainstorming technique to elicit user requirements. In: 2021 IEEE 1st International Maghreb Meeting of the Conference on Sciences and Techniques of Automatic Control and Computer Engineering MI-STA, pp. 254\u2013258 (2021). IEEE","DOI":"10.1109\/MI-STA52233.2021.9464467"},{"key":"1193_CR54","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1016\/j.jss.2015.04.084","volume":"107","author":"P Lenberg","year":"2015","unstructured":"Lenberg, P., Feldt, R., Wallgren, L.G.: Behavioral software engineering: A definition and systematic literature review. J. Syst. Softw. 107, 15\u201337 (2015)","journal-title":"J. Syst. Softw."},{"key":"1193_CR55","doi-asserted-by":"crossref","unstructured":"Ciesielska, M., Bostr\u00f6m, K.W., \u00d6hlander, M.: Observation methods. Qualitative Methodologies in Organization Studies: Volume II: Methods and Possibilities, 33\u201352 (2018)","DOI":"10.1007\/978-3-319-65442-3_2"},{"key":"1193_CR56","doi-asserted-by":"crossref","unstructured":"Sargiotis, D.: Data security and privacy: Protecting sensitive information. In: Data Governance: a Guide, pp. 217\u2013245. Springer, ??? (2024)","DOI":"10.1007\/978-3-031-67268-2_6"},{"key":"1193_CR57","doi-asserted-by":"crossref","unstructured":"Sheng, S., Magnien, B., Kumaraguru, P., Acquisti, A., Cranor, L.F., Hong, J., Nunge, E.: Anti-phishing phil: the design and evaluation of a game that teaches people not to fall for phish. In: Proceedings of the 3rd Symposium on Usable Privacy and Security, pp. 88\u201399 (2007)","DOI":"10.1145\/1280680.1280692"},{"key":"1193_CR58","doi-asserted-by":"publisher","unstructured":"Yasin, A., Fatima, R., Wen, L., JiangBin, Z., Niazi, M.: What goes wrong during phishing education? a probe into a game-based assessment with unfavorable results. Entertainment Computing 52, 100815 (2025) https:\/\/doi.org\/10.1016\/j.entcom.2024.100815","DOI":"10.1016\/j.entcom.2024.100815"},{"key":"1193_CR59","doi-asserted-by":"crossref","unstructured":"Van Der\u00a0Linden, J., Amadieu, F., Vayre, E., Van De\u00a0Leemput, C.: User experience and social influence: A new perspective for ux theory. In: Design, User Experience, and Usability. Design Philosophy and Theory: 8th International Conference, DUXU 2019, Held as Part of the 21st HCI International Conference, HCII 2019, Orlando, FL, USA, July 26\u201331, 2019, Proceedings, Part I 21, pp. 98\u2013112 (2019). Springer","DOI":"10.1007\/978-3-030-23570-3_9"},{"key":"1193_CR60","doi-asserted-by":"crossref","unstructured":"Roseman, I.J., Smith, C.A.: Appraisal theory. Appraisal processes in emotion: Theory, methods, research, 3\u201319 (2001)","DOI":"10.1093\/oso\/9780195130072.003.0001"},{"issue":"2","key":"1193_CR61","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1177\/1754073912463617","volume":"5","author":"PC Ellsworth","year":"2013","unstructured":"Ellsworth, P.C.: Appraisal theory: Old and new questions. Emot. Rev. 5(2), 125\u2013131 (2013)","journal-title":"Emot. Rev."},{"issue":"4","key":"1193_CR62","first-page":"50","volume":"21","author":"JP Lundblad","year":"2003","unstructured":"Lundblad, J.P.: A review and critique of rogers\u2019 diffusion of innovation theory as it applies to organizations. Organ. Dev. J. 21(4), 50 (2003)","journal-title":"Organ. Dev. J."},{"key":"1193_CR63","doi-asserted-by":"publisher","unstructured":"Verkijika, S.F.: \u201cif you know what to do, will you take action to avoid mobile phishing attacks\u201d: Self-efficacy, anticipated regret, and gender. Computers in Human Behavior 101, 286\u2013296 (2019) https:\/\/doi.org\/10.1016\/j.chb.2019.07.034","DOI":"10.1016\/j.chb.2019.07.034"},{"key":"1193_CR64","doi-asserted-by":"crossref","unstructured":"Messnarz, R., Norimatsu, S., Dobaj, J., Ekert, D., Macher, G., Zehetner, T., Aschbacher, L.: First experiences with the automotive spice for cybersecurity assessment model. In: Systems, Software and Services Process Improvement: 28th European Conference, EuroSPI 2021, Krems, Austria, September 1\u20133, 2021, Proceedings 28, pp. 531\u2013547 (2021). Springer","DOI":"10.1007\/978-3-030-85521-5_35"},{"issue":"6","key":"1193_CR65","doi-asserted-by":"publisher","first-page":"3000","DOI":"10.3390\/s23063000","volume":"23","author":"SH Oh","year":"2023","unstructured":"Oh, S.H., Jeong, M.K., Kim, H.C., Park, J.: Applying reinforcement learning for enhanced cybersecurity against adversarial simulation. Sensors 23(6), 3000 (2023)","journal-title":"Sensors"},{"key":"1193_CR66","doi-asserted-by":"crossref","unstructured":"Loftus, N., Green, C., Narman, H.S.: The cybersecurity packet control simulator: Cspcs. In: 2022 IEEE Global Humanitarian Technology Conference (GHTC), pp. 226\u2013233 (2022). IEEE","DOI":"10.1109\/GHTC55712.2022.9911042"},{"key":"1193_CR67","doi-asserted-by":"crossref","unstructured":"Gedris, K., Bowman, K., Neupane, A., Hughes, A., Bonsignore, E., West, R., Balzotti, J., Hansen, D.: Simulating municipal cybersecurity incidents: recommendations from expert interviews. In: Proceedings of the Annual Hawaii International Conference on System Sciences (2021)","DOI":"10.24251\/HICSS.2021.249"},{"key":"1193_CR68","doi-asserted-by":"crossref","unstructured":"Shi, L., Krishnan, S., Wen, S.: Study cybersecurity of cyber physical system in the virtual environment: A survey and new direction. In: Proceedings of the 2022 Australasian Computer Science Week, pp. 46\u201355 (2022)","DOI":"10.1145\/3511616.3513098"},{"key":"1193_CR69","doi-asserted-by":"crossref","unstructured":"Faschang, T., Macher, G.: An open software-based framework for automotive cybersecurity testing. In: European Conference on Software Process Improvement, pp. 316\u2013328 (2023). Springer","DOI":"10.1007\/978-3-031-42307-9_22"},{"key":"1193_CR70","unstructured":"Ani, U.D., Watson, J.D.M., Tuptuk, N., Hailes, S., Carr, M., Maple, C.: Improving the cybersecurity of critical national infrastructure using modelling and simulation. arXiv preprint arXiv:2208.07965 (2022)"},{"key":"1193_CR71","doi-asserted-by":"crossref","unstructured":"Shah, A., Ganesan, R., Jajodia, S., Cam, H., Hutchinson, S.: A novel team formation framework based on performance in a cybersecurity operations center. IEEE Transactions on Services Computing (2023)","DOI":"10.1109\/TSC.2023.3253307"},{"key":"1193_CR72","doi-asserted-by":"crossref","unstructured":"Davis, N., Grant, E.S.: Simulated phishing training exercises versus gamified phishing education games. In: 2022 Fourth International Conference on Emerging Research in Electronics, Computer Science and Technology (ICERECT), pp. 1\u20138 (2022). IEEE","DOI":"10.1109\/ICERECT56837.2022.10060595"},{"key":"1193_CR73","doi-asserted-by":"crossref","unstructured":"Herman, B., Aragon, C., Evans, S., Shanley, L.: Advancing diversity in human centered data science education through games. Proceedings of the Association for Information Science and Technology 57(1), 314 (2020)","DOI":"10.1002\/pra2.314"},{"key":"1193_CR74","doi-asserted-by":"crossref","unstructured":"Xu, W., Frezza, S.: A case study: Integrating a game application-driven approach and social collaborations into software engineering education. In: International Conference on Enterprise Information Systems, vol. 2, pp. 23\u201332 (2011). SCITEPRESS","DOI":"10.5220\/0003445300230032"},{"key":"1193_CR75","doi-asserted-by":"crossref","unstructured":"Eickhoff, J., Donkervliet, J., Iosup, A.: Meterstick: Benchmarking performance variability in cloud and self-hosted minecraft-like games. In: Proceedings of the 2023 ACM\/SPEC International Conference on Performance Engineering, pp. 173\u2013185 (2023)","DOI":"10.1145\/3578244.3583724"},{"issue":"8","key":"1193_CR76","doi-asserted-by":"publisher","first-page":"2860","DOI":"10.3390\/en15082860","volume":"15","author":"RAS Kraemer","year":"2022","unstructured":"Kraemer, R.A.S., Dias, D.P., Silva, A.C., Martins, M.A.I., Ludwig, M.A.: Cost and cybersecurity challenges in the commissioning of microgrids in critical infrastructure: Coge case study. Energies 15(8), 2860 (2022)","journal-title":"Energies"},{"key":"1193_CR77","doi-asserted-by":"crossref","unstructured":"Caviglia, R., Gaggero, G.B., Vincis, N., Morando, O., Aceti, A., Marchese, M.: Spat: A testbed for automotive cybersecurity training. In: 2023 IEEE International Conference on Cyber Security and Resilience (CSR), pp. 381\u2013386 (2023). IEEE","DOI":"10.1109\/CSR57506.2023.10224967"},{"key":"1193_CR78","doi-asserted-by":"crossref","unstructured":"G\u00f3mez, G., Espina, E., Armas-Aguirre, J., Molina, J.M.M.: Cybersecurity architecture functional model for cyber risk reduction in iot based wearable devices. In: 2021 Congreso Internacional de Innovaci\u00f3n Y Tendencias en Ingenier\u00eda (CONIITI), pp. 1\u20134 (2021). IEEE","DOI":"10.1109\/CONIITI53815.2021.9619624"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01193-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-01193-y","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01193-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T08:04:17Z","timestamp":1779869057000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-01193-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,22]]},"references-count":78,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2026,2]]}},"alternative-id":["1193"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-01193-y","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1,22]]},"assertion":[{"value":"8 February 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 December 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 January 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"This study does not involve any human participants or animal experiments. Approval from the Ethics Committee has been obtained.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics Statement"}},{"value":"The authors affirm that there are no known conflicting financial interests or personal relationships that could potentially influence the work presented in this article.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declaration of Competing Interest"}},{"value":"The authors declare no competing interests.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}],"article-number":"32"}}