Modeling the Case of Cyber Espionage for Executive Game Simulations

We model the use-case of cyber espionage for the purpose of game simulations for training executives that lack technical proficiency preparing for the implementation of the NIS2 directive in EU member states. In the first part of the paper, we lay out the common practices of classifying cyber attacks and cyber defense measures suggested by a strong body of literature in the field of cyber security. We formally validate the requirements of a use-case for game simulations and argue for cyber espionage being a purposeful use-case for executive training. In the second part, we explain our two models that demonstrate the functionality, behavior and activity sequence of our proposed executive game simulation for the use-case of cyber espionage. Finally, we discuss avenues for game development and testing.