MEEPS SECURITY is a simulation game with horror elements designed to extend cybersecurity training and awareness by playing as an L1 Security Operation Center (SOC) analyst. Players handle incoming calls regarding cybersecurity incidents, evaluating and submitting the appropriate threat to the callers within the given service level agreement (SLA). The player must correctly resolve at least 80% of tickets to pass the assessment during the shift.
This is named after one of my chows, named Meepo (Yes, the DOTA character).
Note: The game is playable but still under development.
Run pip install -r requirements.txt to install the tool's dependencies.
MEEPS SECURITY is written in Python 3 using the PyGame and PyGame GUI libraries.
The main menu has three buttons: START SHIFT, CREATE TICKETS, and LOG OFF. To play MEEPS SECURITY, select the "START SHIFT" button. This will take you to the main game loop, where you play as an L1 SOC analyst.
MEEPS SECURITY also allows players to manage the tickets, including creating custom tickets by clicking the "MANAGE TICKET" button. At the time of wiring, threat management is still under development.
The "LOG OFF" button exits the game -- you can also click on the close window button.
When starting your shift, you will anticipate calls from various MEEPS SECURITY clients regarding cybersecurity incidents.
A pop-up window will be displayed when an incoming call must be answered within the specified SLA. Failure to answer within SLA will deny you the opportunity for a possible score.
After answering the call, MEEPS SECURITY will display the current caller information, specifically their name, organization, email, and contact number, together with their cyber security concern (ticket). MEEPS SECURITY provides the players with a list of threats, a brief description of the threat, its indicators, and countermeasures. The player must analyze the ticket, select the appropriate threat (from the list), and submit it to the caller. The player will be granted a score when the correct threat is submitted. In addition, the players must be able to submit the appropriate threat within the allotted SLA for a score to be granted.
Note: More threats and scenarios will be added over time.
After your shift, your performance will be evaluated. The players must have submitted at least 80% correct threats to pass the assessment. The shift report also provides the total number of tickets handled, any missed calls and missed tickets.
Click the "END SHIFT" button to end the game.
Currently, MEEPS SECURITY does not save your progress. It selects a random ticket from the SQLite database.
MEEPS SECURITY also allows you to manage the tickets. Users can view, delete, or even create custom tickets to expand the game further. Select a ticket title to view its details. To delete a ticket, click the "-" button. To create a ticket, click the "+" button to take you to the ticket creation page.
Note: Be careful when deleting a ticket. Currently, it does not provide a confirmation mechanism.
Enter the ticket title and description, then choose the threat (answer) relating to the ticket. Click the "CREATE TICKET" button to add the custom ticket. MEEP SECURITY automatically correlates the Guest account to all custom tickets.
Note: You can manually create new accounts and correlate them to a certain ticket.
A confirmation pop-up window will notify the player that the new ticket has been successfully inserted into the database.