blocks|key|4820038|text|我自己也没有玩过这样的游戏，但是我在谷歌上发现了这个：http://www.itgovernance.co.uk/products/3831+--这和你想要的东西很相似吗？|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://www.itgovernance.co.uk/products/3831^0|R|17|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

I haven't played anything like this myself, but I found this on Google: <a href="http://www.itgovernance.co.uk/products/3831" rel="nofollow">http://www.itgovernance.co.uk/products/3831</a> - Is this similar to what you are looking for?

blocks|key|4820209|text|史蒂夫·杰克逊游戏里的黑客怎么样？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4820210|http://www.sjgames.com/hacker/|offset|length|4820211|我用它来做你要问的事。|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|U|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|G|5|6|7|S|8|@]|9|@]|A|$]]]|H|$I|$5|J|K|L|A|$M|C]]]]

How about hacker by Steve Jackson games?

<a href="http://www.sjgames.com/hacker/" rel="nofollow">http://www.sjgames.com/hacker/</a>

I've used it for exactly what you are asking about.

blocks|key|4820325|text|http://www.controlalthack.com/|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4820326|很有趣的游戏。我认为一本书会是一个更好的老师。|entityMap|0|LINK|mutability|MUTABLE|url^0|0|U|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|E|5|6|7|P|8|@]|9|@]|C|$]]]|F|$G|$5|H|I|J|C|$K|4]]]]

<a href="http://www.controlalthack.com/" rel="nofollow">http://www.controlalthack.com/</a>

Pretty interesting game. I think a book would be a better teacher though.

blocks|key|3682206|text|有一个网站可以用于团队合作(笔记本电脑、iPads等)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3682207|http://jeopardylabs.com/play/risk-management-jeopardy4|offset|length|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|1I|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|M|8|@]|9|@$D|N|E|O|1|P]]|A|$]]]|F|$G|$5|H|I|J|A|$K|C]]]]

There is a site you can use for team play (laptops,iPads,etc)

<a href="http://jeopardylabs.com/play/risk-management-jeopardy4" rel="nofollow">http://jeopardylabs.com/play/risk-management-jeopardy4</a>

blocks|key|4820093|text|事实上，我认为经典的“风险”是风险管理的一个很好的例子。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4820094|想想看：|4820095|答:您正在评估您的“系统”中的漏洞，并找出所有潜在的威胁方案。|4820096|B:根据您的评估，您正在分配安全资源，同时使用风险管理原则来做出所有决策。(即“全面防御”需要多少资源，什么是“可接受的”风险等等)|4820097|C:随机/意外因素用骰子和卡片来表示。|4820098|D:博弈论因素也存在，因为有不同的参与者，相互交织在一起的不同的议程。|4820099|与信息没有真正的连接。但这是个风险管理游戏.|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Q|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|R|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|S|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|T|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|U|8|@]|9|@]|A|$]]]|N|$]]

Actually I think that classic "Risk" is a great example of Risk Management. 

Think about it:

A: You are assessing vulnerabilities in your "system" and figure out all potentially threatening scenarios

B: Based on you assessment you are allocating security resources, while using risk management principles to make all decisions. (i.e. how many resources are needed for "full-proof" defense, what is an "acceptable" risk to take and etc)

C: The random/unexpected factors are represented by a dice and cards.

D: The Game Theory factors are also there; as there are different players involved, with intertwined different agendas. 

No real connection to Info. Security but it's a Risk Management game thru-and-thru...

blocks|key|3682223|text|OWASP综合开发是一种以纸牌游戏的形式来帮助软件开发团队识别敏捷、常规和正式开发过程中的安全需求的机制。它是语言，平台和技术不可知论。介绍:Cor珠宝城背后的理念是帮助开发团队，尤其是那些使用敏捷方法的开发团队，识别应用程序安全需求，并开发基于安全的用户故事。虽然这个想法一直在等待足够的时间来推进，但最终的动机是在2012年7月SAFECode发布了其用于敏捷开发环境的实际安全故事和安全任务。Microsoft团队已经发布了它的超高特权:威胁建模游戏(EoP)，但这似乎并没有解决web应用程序开发团队主要需要解决的最合适的问题。EoP是一个很棒的概念和游戏策略，它是在许可下发布的。综合电子商务网站版是基于概念和游戏理念在EoP，但这些已经被修改，以更相关的类型问题电子商务网站开发人员遇到的。它试图将威胁建模思想引入使用敏捷方法的开发团队，或者比其他类型的软件漏洞更专注于web应用程序的弱点，或者不熟悉跨越式和恐惧。|type|blockquote|depth|inlineStyleRanges|entityRanges|data|3682224|https://www.owasp.org/index.php/OWASP_聚光|unstyled|offset|length|entityMap|0|LINK|mutability|MUTABLE|url|https://www.owasp.org/index.php/OWASP_Cornucopia^0|0|0|14|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|O|8|@]|9|@$E|P|F|Q|1|R]]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

<blockquote>
 OWASP Cornucopia is a mechanism in the form of a card game to assist
 software development teams identify security requirements in Agile,
 conventional and formal development processes. It is language,
 platform and technology agnostic.
 
 Introduction The idea behind Cornucopia is to help development teams,
 especially those using Agile methodologies, to identify application
 security requirements and develop security-based user stories.
 Although the idea had been waiting for enough time to progress it, the
 final motivation came when SAFECode published its Practical Security
 Stories and Security Tasks for Agile Development Environments in July
 2012.
 
 The Microsoft SDL team had already published its super Elevation of
 Privilege: The Threat Modeling Game (EoP) but that did not seem to
 address the most appropriate kind of issues that web application
 development teams mostly have to address. EoP is a great concept and
 game strategy, and was published under a Creative Commons Attribution
 License. Cornucopia Ecommerce Website Edition is based the concepts
 and game ideas in EoP, but those have been modified to be more
 relevant to the types of issues ecommerce website developers
 encounter. It attempts to introduce threat-modelling ideas into
 development teams that use Agile methodologies, or are more focused on
 web application weaknesses than other types of software
 vulnerabilities or are not familiar with STRIDE and DREAD.
</blockquote>

<a href="https://www.owasp.org/index.php/OWASP_Cornucopia" rel="nofollow">https://www.owasp.org/index.php/OWASP_Cornucopia</a>

blocks|key|3682236|text|Adam汇编了这些类型游戏的优秀列表--+这里：https://adam.shostack.org/games.html|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|https://adam.shostack.org/games.html|1^0|L|2|0|O|10|1^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]|$A|P|B|Q|1|R]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]|K|$5|F|G|H|C|$I|J]]]]

Adam Shostack has compiled an excellent list of these types of games <a href="https://adam.shostack.org/games.html" rel="nofollow noreferrer">here</a>: 
<a href="https://adam.shostack.org/games.html" rel="nofollow noreferrer">https://adam.shostack.org/games.html</a>

I am looking for table top or card games related to risk management or information security. A kind of "serious" game that can be used as a teaching tool of infosec/risk management.

I know only about <a href="http://www.microsoft.com/security/sdl/adopt/eop.aspx">Microsoft's Elevation of Privilege</a>.

Looking for Information security / risk management table top or card games

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在寻找与风险管理或信息安全相关的桌面或纸牌游戏。一种“严肃”的游戏，可作为信息管理/风险管理的教学工具。我只知道微软的特权提升的事。

问寻找信息安全/风险管理桌面或纸牌游戏
EN

回答 7

Security用户

Security用户

Security用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问寻找信息安全/风险管理桌面或纸牌游戏EN

回答 7

Security用户

Security用户

Security用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问寻找信息安全/风险管理桌面或纸牌游戏
EN