Spatial and Temporal Dimensions: 2D vs. 3D in Serious Games for IT Security
DOI:
https://doi.org/10.4108/eetct.13359Keywords:
serious games, cybersecurity awareness, employee training, workplace learning, 2D vs. 3D game designAbstract
Serious games are an emerging tool for raising cybersecurity awareness and training employees, including in organisations operating critical infrastructures (CI). However, the specific role of spatial game design –such as 2D user interface (UI) environments versus 3D first-person worlds – remains largely unexplored. In this study, we investigate how the spatial dimension of a serious game influences learning outcomes, perceived immersion, and learner motivation in the CI context. We developed two conceptually and content-wise identical games: (1) a 2D UI-based card game and (2) a 3D first-person game set in a virtual hospital environment. In a between-subjects design (n = 159; 2D n = 77, 3D n = 82), participants completed a pre-test, played either the 2D or the 3D game, and responded to an immediate post-test and an EGameFlow-based questionnaire. A second knowledge post-test followed one week later. Our results show that both games improve cybersecurity knowledge, but we find no significant differences between the 2D and 3D versions in terms of knowledge gain, immersion, or motivation. Statistical analyses included paired t-tests for pre–post comparisons, Welch’s two-sample t-tests for between-group comparisons, and Cohen’s d for effect sizes.
References
[1] Lehto M. Cyber-attacks against critical infrastructure. In: Cyber security: Critical infrastructure protection. Springer; 2022. p. 3-42.
[2] Research GV. Cyber Security Training Market Size, Share & Trends Analysis Report; 2023. Accessed: 01-Apr-2025. Available from: https://www.grandviewresearch.com/industry analysis/cyber-security-training-market-report.
[3] Fund IM. Cyber Risk: A Growing Concern for Macrofinancial Stability. International Monetary Fund; 2024. Accessed: 01-Apr-2025. Available from: https://www.imf.org/en/Publications/GFSR/Issues/2024/04/11/global-financial-stability-report-april-2024.
[4] Tolossa D. Importance of cybersecurity awarenesstraining for employees in business. Vidya-A Journal of Gujarat University. 2023;2(2):104-7.
[5] Shillair R, Esteve-González P, Dutton WH, Creese S, Nagyfejeo E, von Solms B. Cybersecurity education, awareness raising, and training initiatives: National level evidence-based results, challenges, and promise. Computers & Security. 2022;119:102756.
[6] Hadlington L. The “human factor” in cybersecurity: Exploring the accidental insider. In: Psychological and behavioral examinations in cyber security. IGI Global; 2018. p. 46-63.
[7] Fromme J, Biermann R, Unger A. Serious Games oder taking games seriously? Digitale Lernwelten: Konzepte, Beispiele und Perspektiven. 2010:39-57.
[8] Jin G, Tu M, Kim TH, Heffron J, White J. Evaluation of game-based learning in cybersecurity education for high school students. Journal of Education and Learning (EduLearn). 2018;12(1):150-8.
[9] Khan MA, Merabet A, Alkaabi S, Sayed HE. Game-based learning platform to enhance cybersecurity education. Education and Information Technologies. 2022:1-25.
[10] Mostafa M, Faragallah OS. Development of serious games for teaching information security courses. IEEE Access. 2019;7:169293-305.
[11] Ejsing-Duun S. A game magically circling. In: Serious games in education: a global perspective. Aarhus Universitetsforlag; 2011. p. 170-86.
[12] Nazri SNB, Kadir TABA, Ihsan SNB. Review on Serious-Education Games for Slow Learners. In: 2023 IEEE 8th International Conference On Software Engineering and Computer Systems (ICSECS). IEEE; 2023. p. 441-6.
[13] Barth V, Wanner T, Gelderie M, Schüle J. Is attacking more fun than defending?—Observations from Developing and Evaluating Practical Game Based Learning. Procedia Computer Science. 2024;246:3148-57.
[14] Stockhardt S, Reinheimer B, Volkamer M, Mayer P, Kunz A, Rack P, et al. Teaching phishing-security: which way is best? In: ICT Systems Security and Privacy Protection: 31st IFIP TC 11 International Conference, SEC 2016, Ghent, Belgium, May 30-June 1, 2016, Proceedings 31. Springer; 2016. p. 135-49.
[15] Rikkers V, Sarmah DK. A story-driven gamified education on USB-based attack. Journal of Computing in Higher Education. 2025;37(1):248-72.
[16] Kaplan-Rakowski R, Lin L, Wojdynski T. Learning vocabulary using 2D pictures is more effective than using immersive 3D stereoscopic pictures. International Journal of Human–Computer Interaction. 2022;38(4):299-308.
[17] Zaharias P, Chatzeparaskevaidou I, Karaoli F. Learning Geography Through Serious Games: The Effects of 2- Dimensional and 3-Dimensional. Learning. 2017;9(1).
[18] Karavidas L, Lilis V, Tsiatsos T, Douka S. Choosing the Dimension of a Serious Game: The HALT Case Study. In: 2024 IEEE Global Engineering Education Conference (EDUCON). IEEE; 2024. p. 1-5.
[19] Makransky G, Petersen GB. The cognitive affective model of immersive learning (CAMIL): A theoretical research-based model of learning in immersive virtual reality. Educational psychology review. 2021;33(3):937-58.
[20] Aksoy E, et al. Comparing the effects on learning outcomes of tablet-based and virtual reality–based serious gaming modules for basic life support training: randomized trial. JMIR serious games. 2019;7(2):e13442.
[21] Carbonell-Carrera C, Jaeger AJ, Saorín JL, Melián D, De la Torre-Cantero J. Minecraft as a block building approach for developing spatial skills. Entertainment Computing. 2021;38:100427.
[22] Dan A, Reiner M, et al. Real time EEG based measurements of cognitive load indicates mental states during learning. Journal of Educational Data Mining. 2017;9(2):31-44.
[23] Ak O, Kutlu B. Comparing 2D and 3D game-based learning environments in terms of learning gains and student perceptions. British Journal of Educational Technology. 2017;48(1):129-44.
[24] Kaimara P, Fokides E, Oikonomou A, Atsikpasi P, Deliyannis I. Evaluating 2D and 3D serious games: The significance of student-player characteristics. ∆ι ´αλoγoι! Θεωρ´ια και πρ ´αξη σ τις επισ τ ´ημες αγωγ ´ης και εκπα´ιδευσ ης. 2019;5:36-56.
[25] Lane HC, Hays MJ, Auerbach D, Core MG. Investigating the relationship between presence and learning in a serious game. In: Intelligent Tutoring Systems: 10th International Conference, ITS 2010, Pittsburgh, PA, USA, June 14-18, 2010, Proceedings, Part I 10. Springer; 2010. p. 274-84.
[26] Pixune. Game Art Outsourcing Price: How Much Does It Cost?; 2024. Accessed: 01-Apr-2025. Available from: https://pixune.com/blog/game-art-outsourcing-price/.
[27] Awojana T, Chou TS. Overview of learning cybersecurity through game based systems. In: 2019 CIEC; 2019. .
[28] Angafor GN, Yevseyeva I, He Y. Game-based learning: A review of tabletop exercises for cybersecurity incident response training. Security and privacy. 2020;3(6):e126.
[29] Karagiannis S, Magkos E. Engaging students in basic cybersecurity concepts using digital game-based learning: Computer games as virtual learning environments. Advances in Core Computer Science-Based Technologies: Papers in Honor of Professor Nikolaos Alexandris. 2021:55-81.
[30] Bacud ML, Mäses S. Game-based learning for cybersecurity awareness training programmes in the public sector. In: ECEL 2021 20th European Conference on e-Learning. Academic Conferences International limited; 2021. p. 50.
[31] Roepke R, Schroeder U. Teaching defence against the dark arts using game-based learning: A review of learning games for cybersecurity education. In: International Conference on Computer Supported Education. Springer; 2019. p. 71-87.
[32] Tobias S, Fletcher JD. Computer Games and Instruction. Charlotte, NC: Information Age Publishing; 2011.
[33] Mayer RE. Computer Games for Learning: An Evidence-Based Approach. Cambridge, MA: MIT Press; 2014.
[34] Irvine CE, Thompson MF, Allen K. CyberCIEGE: an information assurance teaching tool for training and awareness. Naval Postgraduate School (US).; 2005.
[35] Ashley TD, Kwon R, Gourisetti SNG, Katsis C, Bonebrake CA, Boyd PA. Gamification of cybersecurity for workforce development in critical infrastructure. Ieee Access. 2022;10:112487-501.
[36] Cano J, Hernández R, Ros S, Tobarra L. A distributed laboratory architecture for game based learning in cybersecurity and critical infrastructures. In: 2016 13th International Conference on Remote Engineering and Virtual Instrumentation (REV). IEEE; 2016. p. 183-5.
[37] Prümmer J, van Steen T, van den Berg B. Successful Gamification of Cybersecurity Training. Cyberpsychology, Behavior, and Social Networking. 2021;24(9):593-8.
[38] Wu T, Tien KY, Hsu WC, Wen FH. Assessing the Effects of Gamification on Enhancing Information Security Awareness Knowledge. Applied Sciences. 2021;11(19):9266.
[39] Parong J, Mayer RE. Learning science in immersive virtual reality. Journal of Educational Psychology. 2018;110(6):785-97.
[40] Dede T Eren; Wanner, Gelderie M. Screenshot of 2D UI card game; 2025. Authors’ original image; implemented with React.
[41] Dede T Eren; Wanner, Gelderie M. Screenshot of 3D first-person hospital environment; 2025. Authors’ original image; implemented in Godot engine.
[42] Godot Engine contributors. Godot Engine;. Open-source game engine; accessed 14 August 2026. https://godotengine.org/.
[43] Meta Platforms, Inc . React – A JavaScript library for building user interfaces; 2026. Accessed: 24 August 2025. https://reactjs.org/.
[44] Bloom BS, Engelhart MD, Furst EJ, Hill WH, Krathwohl DR. Taxonomy of Educational Objectives: The Classification of Educational Goals. Handbook I: Cognitive Domain. Longmans, Green; 1956.
[45] Anderson LW, Krathwohl DRe. A Taxonomy for Learning, Teaching, and Assessing: A Revision of Bloom’s Taxonomy of Educational Objectives. Longman; 2001.
[46] Bundesamt für Sicherheit in der Informationstechnik (BSI). Pflichten für KRITIS-Betreiber; 2025. Accessed: 1 March 2025. https://www.bsi.bund.de/dok/12211858.
[47] Bundesministerium des Innern (BMI). Nationale Strategie zum Schutz Kritischer Infrastrukturen (KRITIS-Strategie); –. Accessed: 16 March 2025. https://www.bmi.bund.de/SharedDocs/downloads/DE/publikationen/themen/bevoelkerungsschutz/kritis.pdf?__blob=publicationFile&v=3.
[48] OpenKRITIS. Das NIS2-Umsetzungsgesetz (NIS2UmsuCG); 2025. Accessed: 3 March 2025. https://www.openkritis.de/it-sicherheitsgeset z/nis2-umsetzung-gesetz-cybersicherheit.html.
[49] Prolific Academic Ltd . Prolific; 2025. Accessed: 28-Apr- 2025. Available from: http://www.prolific.com.
[50] Tivian. Unipark | Tivian DE; 2025. Accessed: 15-Apr- 2025. Available from: http://www.tivian.com.
[51] Fu FL, Su RC, Yu SC. EGameFlow: A scale to measure learners’ enjoyment of e-learning games. Computers & Education. 2009;52(1):101-12.
[52] Welch BL. The generalisation of “Student’s” problem when several different population variances are involved. Biometrika. 1947;34(1-2):28-35.
[53] Cohen J. Statistical Power Analysis for the Behavioral Sciences. 2nd ed. Hillsdale, NJ: Lawrence Erlbaum Associates; 1988.
[54] Shapiro SS, Wilk MB. An analysis of variance test for normality (complete samples). Biometrika. 1965;52:591-611.
[55] Virtanen P, et al. SciPy 1.0: fundamental algorithms for scientific computing in Python. Nature Methods. 2020;17:261-72.
[56] Python Software Foundation. Python Language Reference; 2023. Version 3.12, https://www.python.org/.
[57] Levene H. Robust tests for equality of variances. Contributions to Probability and Statistics. 1960:278-92.
Downloads
Published
Issue
Section
License
Copyright (c) 2025 Eren Dede, Tamara Wanner, Marcus Gelderie
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
This is an open-access article distributed under the terms of the Creative Commons Attribution CC BY 3.0 license, which permits unlimited use, distribution, and reproduction in any medium so long as the original work is properly cited.
