Click, Knock, Bypass - Overview
Introduction
Blue team: You are a small business owner in your hometown. Lately, you’ve been hearing from folks in the local business association about a number of security issues - break-ins, network hackers, people pretending to be pizza delivery drivers. In response to this, you’ve decided to set aside money every month towards “security”, although you’re not sure exactly what “security” means or where you should be focusing your attention. You’ll just have to wing it and hope whoever’s causing all this trouble doesn’t come knocking at your door.
Red team: You are a freelancer who specializes in computer and network security, and you also offer consultation to businesses to help them develop training and policies around security in general, including social engineering. Recently, you received a request from a client who wants you to test the security of a small number of local businesses, by attempting to breach their security “in any way possible”. You are assured by the client that the businesses have agreed to this exercise as a way of discovering any vulnerabilities. In the security sector, this is known as the Red Team/Blue Team approach and is an uncommon but effective practice in the security sector.
Game Objective
Players take on the roles of red teamers (attackers) and blue teamers (defenders). The goal of the blue team player is to protect their business from security breaches by investing in defenses. The goal of the red team is to bypass those defenses using a mix of social engineering and IT exploitation tactics.
This game is meant to be playable by anyone, of (nearly) any age. We recommend that those who are less familiar with board games play as Red Team, and those who want to strategize a bit more play as Blue Team.
