2023, Scherb, Christopher, Heitz, Luc, Grimberg, Frank, Grieder, Hermann, Maurer, Marcel, Gerber, Aurona, Hinkelmann, Knut

With the rising number of cyberattacks, such as ransomware attacks and cyber espionage, educating non-cybersecurity professionals to recognize threats has become more important than ever before. However, traditional training methods, such as phishing awareness campaigns, training videos and assessments have proven to be less effective over time. Therefore, it is time to rethink the approach on how to train cyber awareness. In this paper we suggest an alternative approach -- a serious game -- to educate awareness for common cyberattacks. While many serious games for cybersecurity education exist, all follow a very similar approach: showing people the effects of a cyber attack on their own system or company network. For example, one of the main tasks in these games is to sort out phishing mails. We developed and evaluated a new type of cybersecurity game: an attack simulator, which shows the entire setting from a different perspective. Instead of sorting out phishing mails the players should write phishing mails to trick potential victims and use other forms of cyberattacks. Our game explains the intention of each attack and shows the consequences of a successful attack. This way, we hope, players will get a better understanding on how to detect cyberattacks.

2019, Grieder, Hermann, Schwaferts, Dino, Verkuil, Arie Hans, Hinkelmann, Knut, Aeschbacher, Marc

Companies today are still highly influenced by the management theories of the indus-trial age. To be successful in the future companies need to become part of digital eco-systems where partners and customers will be co-creators. Customers and employees’ expectations are changing, and managers need to re-evaluate traditional management methods to enable companies to successfully transition into the digital era. During the transition, we will see a change from sociotechnical systems to transitional constructs that enable co-creation and collaboration. Digital Arenas will allow companies to create value outside of their industry by collaborating with other companies through APIs; this will give rise to new business models everywhere.

2023, Asprion, Petra, Grieder, Hermann, Grimberg, Frank

Organizations today need internal reporting channels to report illegal/unethical misconduct. For this purpose, organizations set up one or more - often digital - internal reporting channels. Persons/Employees who want to report misconduct, so-called whistleblowers, expose themselves to reprisals and therefore need trustworthy reporting channels which ensure ´Digital Trust´. Blockchain, a technology that overcomes the need for trust due to its properties of immutability and integrity of data, could be promising as underlying technology for a digital reporting channel which is recognized as trustworthy. In our research, we explored multiple perspectives relevant to a trustworthy digital reporting system. Applying design science research, we evaluated the current state of the art of (digital) reporting channels and developed a prototypical blockchain-based reporting solution called “Integrity@Inside”. The prototype is being iteratively demonstrated and pre-evaluated.

2022, Asprion, Petra, Grieder, Hermann, Grimberg, Frank

Integrity@Inside leverages blockchain technology to prototype a web-based internal reporting channel that is compliant with the new EU Directive 2019/1937.