Abstract

Users of this project can utilize a website with supporting multiple, interactive and responsive learning systems that teach them how to identify and respond to the most common types of cybercrime. The website includes 10 short, interactive lessons on identifying the following primary types of cyber threats (Malware, Phishing, Ransomware, Spyware/Adware, DDoS Attack, Man-in-the-Middle Attack, SQL Injection, Password Attack, Social Engineering, Supply Chain Attack). Each lesson has a built-in quick check question designed to reinforce what has been learned, and the quiz engine provides the user with randomly selected questions that allow them to receive immediate feedback and track their progress. The system was created using HTML, CSS, and Vanilla JavaScript to create a high level of performance, minimal load time, and compatibility across multiple types of devices. The user interface is designed to provide clear, easy to navigate, accessible and mobile-friendly interfaces. Users can store their progress locally in their browser and do not need an account or external database, therefore protecting their privacy. Overall, the work is a lightweight, user-friendly educational platform to help users develop their skills through repeated practice and retention of information.

References

• DeepStrike, “Cybersecurity Statistics 2025: Key Trends & Breach Costs,” 2025.
• IBM Security, “X‑Force Threat Intelligence Index 2025,” IBM Institute for Business Value, 2025.
• Varonis, “139 Cybersecurity Statistics and Trends,” 2025.
• Keepnet Labs, “Microlearning in Security Awareness Training Programs,” 2025.
• Yubico & Talker Research, “Global State of Authentication Survey,” 2025.
• J. Prümmer et al., “A Systematic Review of Cybersecurity Training Methods,” Comput. & Security, vol. 134, 2024.
• H. Ascic, “Effectiveness of Cybersecurity Awareness Training for SMEs,” master’s Thesis, Natl. Coll. Ireland, 2023.
• G. Ho et al., “Understanding Phishing Training Efficacy in Practice,” IEEE S&P, 2025.
• A. Rozema and J. Davis, “Anti‑Phishing Training Inefficacy,” arXiv:2506.19899, 2025.
• TerraNova Security, “Integrating Microlearning into Awareness Training,” 2023.
• TrainingFolks, “Microlearning for Cybersecurity,” 2017.
• Symbol Security, “Microlearning in Awareness Programs,” 2025.
• D. Le, “Cybersecurity Training Using Microlearning and Gamification,” Doctoral Project, 2023.
• A. Agrianidis, “Information Security Training and Serious Games,” Master’s Thesis, 2021.
• A. Gwenhure et al., “Gamification of Cybersecurity Awareness,” Int. J. Serious Games, vol. 11, 2024.
• O. Pahlavanpour and X. Gao, “Mapping Study on Gamification in Security Awareness,” Heliyon, vol. 10, 2024
• F. Alotaibi et al., “Enhancing Cybersecurity Awareness with Mobile Games,” ICITST, pp. 129–134, 2018.
• W. Hill, M. Fanuel, and X. Yuan, “Comparing Serious Games for Cybersecurity,” ASEE Conf., 2020.
• C. Moumouh et al., “Serious Games for Security Training,” Int. J. Serious Games, vol. 12, 2025.
• NIST, “Human‑Centered Cybersecurity Program,” 2016–present.
• V. Zimmermann et al., “Human‑Centered Cybersecurity Revisited,” CACM, vol. 67, pp. 72–81, 2024.
• A. Albarrak et al., “Cybersecurity, Usability, and HCI in Energy Systems,” Sustainability, vol. 16, 2024.
• M. Grobler et al., “User, Usage, Usability Framework,” Frontiers Big Data, vol. 4, 2021.
• A. Vasalou et al., “Cybersecurity in AI‑Enabled Homes,” Comput. & Security, vol. 138, 2025.