Gamified Network Security Training via Virtual Topologies

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network security training methodologies are ineffective due to lack of interaction, high costs for one-on-one coaching, inefficient use of resources in group settings, and difficulty in adapting to dynamic changes in network security products and attendee skill levels, leading to poor engagement and retention of training material.

Innovation Solution

A gamified training system using dedicated virtual environments with simulated network topologies and full-feature virtual network security appliances, where attendees complete problem-solving objectives in a competitive and dynamic environment, with real-time feedback and adaptation to skill levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If lectures are used to train attendees, then information can be provided to many people in a short amount of time, but the training becomes monotonous and lacks interaction between trainer and trainees

Engineering Contradiction:
Improvetraining efficiencyVSAvoidengagement
Core Design Contradiction:
ProductivityVSEase of operation

Solution Approach 1:

The patent creates virtual copies of network security devices and environments that attendees can interact with individually. Each attendee receives a virtualized training environment that replicates real network security scenarios, allowing simultaneous independent interaction for multiple users without requiring physical presence or direct trainer attention.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The training system dynamically adapts to individual attendee needs by providing real-time feedback, adjusting difficulty levels, and responding to user actions within the virtual environment. The system transitions from static lecture content to dynamic interactive scenarios that evolve based on attendee performance and choices.

Inventive Principle:
Principle #15Dynamics

2Reliability

If one-on-one coaching programs are used to provide thorough training, then good training results are achieved, but the cost becomes prohibitive for training several individuals

Engineering Contradiction:
Improvetraining qualityVSAvoidtraining cost
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The virtual training environment serves multiple functions simultaneously: it provides individualized coaching, automated assessment, scenario simulation, and progress tracking all within a single system. One virtual environment can serve multiple attendees with different skill levels and learning paces, eliminating the need for separate coaching sessions for each individual.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system enables attendees to self-direct their learning within the virtual environment, receiving automated guidance and feedback without requiring constant trainer intervention. The virtual environment provides contextual help, step-by-step instructions, and immediate performance feedback, allowing attendees to learn at their own pace with minimal human resource investment.

Inventive Principle:
Principle #25Self-service

3Adaptability or versatility

If group discussions and tutorials are used for training, then resource sharing is enabled, but typically only a subset of attendees participate diligently resulting in inefficient use of time and resources

Engineering Contradiction:
ImprovecollaborationVSAvoidparticipation efficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The training system segments the group into individual virtual workspaces while maintaining connection to shared learning objectives. Each attendee has their own virtual network environment to explore and configure, but all participants work toward common training goals and can be compared against each other through leaderboards and standardized assessments.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements continuous feedback mechanisms that track individual progress, provide real-time performance metrics, and display comparative results. This gamified feedback loop motivates all attendees to engage actively by showing their standing relative to peers, transforming passive group participation into active individual competition.

Inventive Principle:
Principle #23Feedback

4Loss of information

If traditional training formats focus on memorization with screen sharing demonstrations, then configuration steps can be shown, but trainees are not engaged and promptly lose much of what was learned

Engineering Contradiction:
Improveknowledge retentionVSAvoidengagement
Core Design Contradiction:
Loss of informationVSEase of operation

Solution Approach 1:

The virtual environment pre-configures realistic network scenarios and security devices before training begins. Attendees immediately interact with pre-set security configurations, threat scenarios, and network topologies that mirror real-world situations, eliminating the need to first learn abstract concepts before applying them.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces the mechanical act of watching screen demonstrations with direct interactive manipulation of virtual security devices. Instead of passively observing trainer actions on a screen, attendees directly configure virtual firewalls, analyze security logs, and respond to simulated threats, transforming memorization into muscle memory through repeated practice.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

5Adaptability or versatility

If training materials are updated to reflect constant product changes, then current knowledge is provided, but it becomes difficult to keep training materials current

Engineering Contradiction:
Improvecontent currencyVSAvoidmaintenance effort
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system uses virtual copies of network security devices that can be updated independently of physical hardware. When products change, the virtual environment is updated with new device images, configurations, and scenarios without affecting real infrastructure or requiring complete retraining material redevelopment.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The training system dynamically adapts to product changes by allowing administrators to update virtual device configurations and scenarios centrally. These updates automatically propagate to all training instances, ensuring all attendees learn current best practices and configurations without manual redistribution of training materials.

Inventive Principle:
Principle #15Dynamics

6Adaptability or versatility

If dynamic changes are introduced during training to adapt to different skill levels, then personalized learning is enabled, but logistical challenges arise including informing attendees and generating results in real time

Engineering Contradiction:
ImprovepersonalizationVSAvoidlogistical complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The training system dynamically adjusts difficulty levels, scenario complexity, and guidance based on individual attendee performance in real-time. The virtual environment automatically modifies parameters such as threat severity, configuration complexity, and time constraints without requiring manual intervention or communication with attendees.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system implements automated real-time feedback loops that track attendee progress, assess performance against learning objectives, and adjust subsequent scenarios accordingly. Results are immediately calculated and displayed within the virtual environment, eliminating the need for manual grading or result generation.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11475790B2Gamified network security training using dedicated virtual environments simulating a deployed network topology of network security products
Publication Date: 2022.10.18 FORTINET INC
  • US11475790B2 patent drawing
  • US11475790B2 patent drawing
  • US11475790B2 patent drawing

AI summary

Systems and methods are described for providing training to attendees of a network security training session through use of gamification. A virtual environment is created containing a network topology simulating a deployed network of network security devices for which teams of the attendees are to receive training. A 3D game interface is presented on a display of a computer system of an attendee. Based on a leaderboard server's game state, a problem-solving objective for the training session is presented on the display. The virtual environment facilitates interactions by the attendee with the network security devices via real web interfaces of corresponding full-feature virtual network security appliances in connection with attempts by the attendee to complete the objectives. Upon completion of an objective, the leaderboard server's game state is updated. Based on the game state of a group of objectives a second group of problem-solving objectives is presented to the attendee.