Utilizing a Gaming Environment for Evaluating Security Policies

Abstract

An approach for utilizing a gaming environment for evaluating security policies is presented. An administrator uses a mapping system to map policy tags corresponding to a policy manager with game tags corresponding to a game manager. In addition, the mapping system configures a participant's game based upon gaming attributes and history data, such as assigning incentives to particular roles or locations, using customized terrains, and configuring screen resolution. Once the mapping system maps policy tags to game tags and configures the game, the mapping system invokes the game and allows the game participant to play the game. While the game participant plays the game, the mapping system identifies policy events, such as a security breach, and rewards the game participant accordingly.

1 . A computer-implemented method comprising:
 identifying a game tag that is associated with a game application;   identifying a policy tag that is associated with a policy manager;   mapping the game tag to the policy tag;   identifying, based upon the mapping, a policy event associated with the policy manager in response to a user playing the game application.   
   
   
       2 . The method of  claim 1  wherein the mapping further comprises:
 associating a game incentive to the policy tag, wherein the game incentive provides an incentive for the user to utilize a policy resource that is associated with the policy manager.   
   
   
       3 . The method of  claim 1  further comprising:
 detecting that the policy event is associated with a security breach;   identifying, in response to the detecting; a reward that is associated with the identified policy event; and   providing the identified reward to the user.   
   
   
       4 . The method of  claim 3  further comprising:
 identifying subsequent policy events from the user playing the game application as a result from the user receiving the reward.   
   
   
       5 . The method of  claim 1  wherein the mapping further comprises:
 identifying a plurality of game tags associated with the game application, the game tag included in the plurality of game tags;   identifying a plurality of policy tags associated with the policy manager, the policy tag included in the plurality of policy tags;   retrieving history data, the history data including information regarding the plurality of policy tags and the plurality of game tags; and   determining which policy tags to map to which game tags based upon the history data.   
   
   
       6 . The method of  claim 5  further comprising:
 detecting, based upon the history data, that an area included in the game application is underutilized; and   providing, in response to the detecting, the user with an incentive to utilize the area.   
   
   
       7 . The method of  claim 1  wherein the mapping further comprises:
 identifying a plurality of policy events;   determining parameter combinations that correspond to the policy events, the parameter combinations including a parameter that is selected from the group consisting of a role, a resource, and a condition.   
   
   
       8 . A computer program product comprising:
 a computer operable medium having computer readable code, the computer readable code being effective to:
 identify a game tag that is associated with a game application; 
 identify a policy tag that is associated with a policy manager; 
 map the game tag to the policy tag; 
 identify, based upon the mapping, a policy event associated with the policy manager in response to a user playing the game application. 
   
   
   
       9 . The computer program product of  claim 8  wherein the computer readable code is further effective to:
 associating a game incentive to the policy tag, wherein the game incentive provides an incentive for the user to utilize a policy resource that is associated with the policy manager.   
   
   
       10 . The computer program product of  claim 8  wherein the computer readable code is further effective to:
 detect that the policy event is associated with a security breach;   identify, in response to the detection, a reward that is associated with the identified policy event; and   provide the identified reward to the user.   
   
   
       11 . The computer program product of  claim 10  wherein the computer readable code is further effective to:
 identify subsequent policy events from the user playing the game application as a result from the user receiving the reward.   
   
   
       12 . The computer program product of  claim 8  wherein the computer readable code is further effective to:
 identify a plurality of game tags associated with the game application, the game tag included in the plurality of game tags;   identify a plurality of policy tags associated with the policy manager, the policy tag included in the plurality of policy tags;   retrieve history data, the history data including information regarding the plurality of policy tags and the plurality of game tags; and   determine which policy tags to map to which game tags based upon the history data.   
   
   
       13 . The computer program product of  claim 12  wherein the computer readable code is further effective to:
 detect, based upon the history data, that an area included in the game application is underutilized; and   provide, in response to the detecting, the user with an incentive to utilize the area.   
   
   
       14 . The computer program product of  claim 8  wherein the computer readable code is further effective to:
 identify a plurality of policy events;   determine parameter combinations that correspond to the policy events, the parameter combinations including a parameter that is selected from the group consisting of a role, a resource, and a condition.   
   
   
       15 . An information handling system comprising:
 one or more processors;   a memory accessible by the processors;   one or more nonvolatile storage devices accessible by the processors; and   a policy event detection tool for detecting policy events, the policy event detection tool being effective to:
 identify a game tag that is associated with a game application; 
 identify a policy tag that is associated with a policy manager; 
 map the game tag to the policy tag; 
 store the mapping in one of the nonvolatile storage devices; and 
 identify, based upon the mapping, a policy event associated with the policy manager in response to a user playing the game application. 
   
   
   
       16 . The information handling system of  claim 15  wherein the policy event detection tool is further effective to:
 retrieve a game incentive from one of the nonvolatile storage devices to associate with the policy tag, wherein the game incentive provides an incentive for the user to utilize a policy resource that is associated with the policy manager.   
   
   
       17 . The information handling system of  claim 15  wherein the policy event detection tool is further effective to:
 detect that the policy event is associated with a security breach;   identify, in response to the detection, a reward from one of the nonvolatile storage devices that is associated with the identified policy event; and   provide the selected reward to the user.   
   
   
       18 . The information handling system of  claim 17  wherein the policy event detection tool is further effective to:
 identify subsequent policy events from the user playing the game application as a result from the user receiving the reward.   
   
   
       19 . The information handling system of  claim 15  wherein the policy event detection tool is further effective to:
 identify a plurality of game tags associated with the game application, the game tag included in the plurality of game tags;   identify a plurality of policy tags associated with the policy manager, the policy tag included in the plurality of policy tags;   retrieve history data from one of the nonvolatile storage devices, the history data including information regarding the plurality of policy tags and the plurality of game tags; and   determine which policy tags to map to which game tags based upon the history data.   
   
   
       20 . The information handling system of  claim 19  wherein the policy event detection tool is further effective to:
 detect, based upon the history data, that an area included in the game application is underutilized; and   provide, in response to the detecting, the user with an incentive to utilize the area.