IMPACTO: A Cybersecurity Training Platform Based on the Simulation of Economic Aspects of Cyberattacks
Keywords:
Cybersecurity, Cybersecurity Training, Risk Analysis, Cybersecurity Economics, Investment Planning, Cyberattack Simulation, Small and Medium-Sized Enterprises, Hackers do BemSynopsis
Cybersecurity planning poses a challenge for resource-constrained companies, particularly given the rise in cyberattacks and their economic consequences. IMPACTO is an innovative solution designed to train students and professionals in cybersecurity economics, with a special focus on Small and Medium-sized Enterprises (SMEs). Developed to support the training of students and professionals, the platform combines risk analysis with cybersecurity investment planning, integrating technical and economic aspects through realistic scenario simulations based on public report data and advanced economic models. The tool facilitates the study and formulation of security strategies, enabling managers and technical staff to understand the financial impact of attacks and technical decisions. IMPACTO offers hands-on learning, helping users grasp the financial implications of various protection strategies and risks across different contexts. Usability and functionality assessments have demonstrated its high effectiveness as an educational tool and an aid to decision-making.
Downloads
References
Aiyer, B., Caso, J., Russell, P., and Sorel, M. (2022). New survey reveals $2 trillion market opportunity for cybersecurity technology and service providers. [link]. Acesso em Dezembro de 2024.
Brooke, J. et al. (1996). Sus-a quick and dirty usability scale. Usability evaluation in industry, 189(194):4–7.
European Commission (2020). Skills for SMEs: Cybersecurity, Internet of things and big data for small and medium-sized enterprises. [link]. Acesso em Dezembro de 2024.
Fedele, A. and Roner, C. (2022). Dangerous Games: A Literature Review on Cybersecurity Investments. Journal of Economic Surveys, 36(1):157–187.
Franco, M., Omlin, C., Kamer, O., Scheid, E., Granville, L., and Stiller, B. (2024). SECAdvisor: A Tool for Cybersecurity Planning using Economic Models. In XXIV Simpósio Brasileiro de Segurança da Informação e de Sistemas Computacionais (SBSeg), pages 554–569, São José dos Campos/SP.
Franco, M. F., Granville, L. Z., and Stiller, B. (2023). CyberTEA: A Technical and Economic Approach for Cybersecurity Planning and Investment. In IEEE/IFIP Network Operations and Management Symposium (NOMS), pages 1–6. IEEE.
Franco, M. F., Soares, L. R., and Nobre, J. C. (2025). Saúde Sob Ataque: Da Avaliação de Riscos ao Desenvolvimento de Estratégias de Investimentos em Cibersegurança na Área da Saúde. XXV Simpósio Brasileiro de Computação Aplicada à Saúde (SBCAS 2025), 36:1–44.
Gartner (2024). Gartner Forecasts Global Information Security Spending to Grow 15 [link]. Acessado em julho de 2025.
Gordon, L. A., Loeb, M. P., and Zhou, L. (2020). Information segmentation and investing in cybersecurity. Journal of Information Security, 12(1):115–136.
Gulyas, O. and Kiss, G. (2023). Impact of cyber-attacks on the financial institutions. Procedia Computer Science, 219:84–90.
IBM (2024). X-Force Threat Intelligence Index 2024. [link]. Acessado em julho de 2025.
Kianpour, M., Kowalski, S. J., and Øverby, H. (2021). Systematically understanding cybersecurity economics: A survey. Sustainability, 13(24):13677.
Nunes, J., Franco, M., Scheid, E., Kozenieski, G., Lindemann, H., Soares, L., Nobre, J., and Granville, L. (2024). Sim-ciber: Uma solução baseada em simulações probabilísticas para quantificação de riscos e impactos de ciberataques utilizando relatórios estatísticos. In XXIV Simpósio Brasileiro de Segurança da Informação e de Sistemas Computacionais, pages 570–585.
Verizon (2025). Data Breach Investigations Report (DBIR). [link]. Acessado em julho de 2025.
