From Dungeon Crawling to Cyber Defense Drill: Using RPG Principles and LLM for Operational Team Dev

No ratings

Presented at DeepSec 2024 by

Aurélien Denis

Charles Garang

Continuous improvement/training is in the DNA of cybersecurity professionals, specifically for incident responders, which are always searching for new ways to learn and practice their technical and analytical crafts. This is even more the case in mature environments where Incident response teams may find themselves in a situation with few high stakes incidents, preventing them from applying their technical and thinking skills, thus lowering their readiness when a crisis occur. LLMs based conversational agents are becoming mainstream and applications are countless. In the meantime, Tabletop Role-Playing Games (TTRPG) are found to be a great breeding ground for creativity and fun. To achieve the benefits of this game, preparation is needed and a game master must be present to keep the players engaged. So we leveraged the power of AI, mixed automation and past experiences/lessons learned with the fun of TTRPG to provide a new tool for incident responders to practice live sessions... In this talk, we will present our new Mattermost-enabled game that allows players to be confronted with dire situations.