Research on Capture the Flag Exercises for Cybersecurity Skill Training Among Malaysian Undergraduates

Abstract

Cybersecurity education is crucial for addressing the growing skills gap in industries, with Capture the Flag (CTF) exercises emerging as a promising gamified approach for engaging and training students in cybersecurity skills. This study introduces SKRCTF, an integrated framework that adapts CTF principles for Malaysian undergraduate cybersecurity education. Through a systematic integration of gamification elements and pedagogical principles, SKRCTF was designed to cater to the specific needs and challenges of Malaysian undergraduates in cybersecurity skill development. The framework's effectiveness was evaluated through a quasi-experimental study involving two Malaysian universities, using pre-test and post-test assessments. While initial results showed limited improvement in overall performance, the second iteration with enhanced scaffolding demonstrated significant progress in specific areas such as operating system threats and cryptography pattern recognition. These findings, though partially negative, provide valuable insights into the prerequisites and conditions necessary for effective CTF implementation in Malaysian higher education. The study contributes to the understanding of how gamified cybersecurity training should be adapted for different educational contexts, particularly highlighting the importance of fundamental computing knowledge and structured support systems. The SKRCTF framework and its implementation findings offer a foundation for developing more effective cybersecurity training programs tailored to Malaysian undergraduate education.