“Journey of Minds: Cybersecurity”: Open-World Game Development for Cybersecurity Learning with GDLC Approach

Abstract

This research aims to develop a cybersecurity learning game using the Game Development Life Cycle (GDLC) approach, integrating the principles of experiential learning, flow theory, and adaptive scaffolding. The research background is based on the increasing prevalence of modern cyber threats, particularly social engineering-based attacks such as phishing, which can lead to credential theft and ransomware escalation, as well as the high risk exposure among adolescents and young adults. The method used was Research and Development (RnD) with the GDLC model, which includes initiation, pre-production, production, testing, deployment, and evaluation stages. Testing was conducted through alpha testing using a Black Box Testing approach and beta testing involving three users through one-on-one validation scenarios. Data collected included functional test results, completion times for each segment, and user responses through interviews. The results showed that all game features performed as expected with no test case failures, resulting in a 100% system success rate. Time analysis revealed that the exploration and practice segments had longer durations than the evaluative segments, such as quizzes, indicating the presence of experiential learning activities. Furthermore, interview results indicated a positive response to the game's design and gameplay, although improvements were still needed in terms of navigation and clarity of task objectives. Thus, the developed game not only meets technical requirements but also supports experiential cybersecurity learning through the integration of pedagogical design and structured game mechanics.