Phishing Quest: An AI-Driven Game-Based Learning System for Adaptive Email Threat Detection Training

Phishing attacks remain one of the most widespread cybersecurity threats, exploiting users through deceptive emails that aim to steal sensitive information such as passwords, financial details, and personal data. Traditional cybersecurity awareness programs often fail to sustain user engagement and provide adaptive learning experiences. This study aims to develop Phishing Quest: An AI-Driven Game-Based Learning System for Adaptive Email Threat Detection Training, an interactive platform designed to enhance users’ ability to identify and respond to phishing emails effectively. Specifically, the study seeks to create a game-based learning environment integrated with artificial intelligence that adapts training difficulty based on user performance, promotes engagement through interactive activities, and improves phishing detection skills.
The study employs a developmental research design involving the phases of planning, system design, development, implementation, and evaluation. The proposed system utilizes artificial intelligence algorithms to analyze user behavior and generate adaptive phishing scenarios tailored to individual learning progress. Game-based learning elements such as points, levels, rewards, challenges, and feedback mechanisms are integrated to encourage active participation and continuous learning. The system will be evaluated using usability testing and performance assessment questionnaires administered to selected participants. Data gathered will be analyzed to determine the effectiveness, usability, and user satisfaction of the developed system.
The expected results of the study indicate that the proposed system can significantly improve users’ awareness and detection of phishing emails by providing engaging and adaptive cybersecurity training. Participants are anticipated to demonstrate increased accuracy in identifying phishing attempts, improved retention of cybersecurity concepts, and higher engagement compared to traditional learning approaches. Additionally, the integration of AI-driven adaptive learning is expected to provide personalized training experiences that address individual weaknesses and learning needs.
The study concludes that Phishing Quest has the potential to become an effective cybersecurity education tool that combines artificial intelligence and game-based learning to strengthen email threat detection skills. The system may contribute to reducing users’ vulnerability to phishing attacks while promoting cybersecurity awareness in educational institutions, organizations, and online communities

Phishing Detection, Cybersecurity Awareness, Artificial Intelligence, Game-Based Learning, Adaptive Learning System, Email Threat Detection, Cybersecurity Training.

1. Alsharnouby, M., Alaca, F., & Chiasson, S. (2015). Why phishing still works: User strategies for combating phishing attacks. International Journal of Human-Computer Studies, 82, 69–82. https://doi.org/10.1016/j.ijhcs.2015.05.005 [Google Scholar] [Crossref]

2. Arachchilage, N. A. G., & Love, S. (2014). Security awareness of computer users: A phishing threat avoidance perspective. Computers in Human Behavior, 38, 304–312. https://doi.org/10.1016/j.chb.2014.05.046 [Google Scholar] [Crossref]

3. Bada, M., Sasse, A. M., & Nurse, J. R. C. (2019). Cyber security awareness campaigns: Why do they fail to change behavior? arXiv Preprint arXiv:1901.02672. https://arxiv.org/abs/1901.02672 [Google Scholar] [Crossref]

4. Bishop, C. M. (2021). Pattern Recognition and Machine Learning. Springer. [Google Scholar] [Crossref]

5. Canova, G., Volkamer, M., Bergmann, C., & Reinheimer, B. (2015). NoPhish app evaluation: Lab and retention study. NDSS Workshop on Usable Security. https://doi.org/10.14722/usec.2015.23012 [Google Scholar] [Crossref]

6. Connolly, T. M., Boyle, E. A., MacArthur, E., Hainey, T., & Boyle, J. M. (2012). A systematic literature review of empirical evidence on computer games and serious games. Computers & Education, 59(2), 661–686. https://doi.org/10.1016/j.compedu.2012.03.004 [Google Scholar] [Crossref]

7. Dhamija, R., Tygar, J. D., & Hearst, M. (2006). Why phishing works. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (pp. 581–590). Association for Computing Machinery. https://doi.org/10.1145/1124772.1124861 [Google Scholar] [Crossref]

8. Furnell, S. (2019). Cybersecurity education and awareness: Looking back and looking forward. Computer Fraud & Security, 2019(10), 13–15. https://doi.org/10.1016/S1361-3723(19)30100-0 [Google Scholar] [Crossref]

9. Hamari, J., Koivisto, J., & Sarsa, H. (2014). Does gamification work? A literature review of empirical studies on gamification. In 2014 47th Hawaii International Conference on System Sciences (pp. 3025–3034). IEEE. https://doi.org/10.1109/HICSS.2014.377 [Google Scholar] [Crossref]

10. Jansson, K., & von Solms, R. (2013). Phishing for phishing awareness. Behaviour & Information Technology, 32(6), 584–593. https://doi.org/10.1080/0144929X.2011.632650 [Google Scholar] [Crossref]

11. Kaplan, A., & Haenlein, M. (2019). Siri, Siri, in my hand: Who’s the fairest in the land? On the interpretations, illustrations, and implications of artificial intelligence. Business Horizons, 62(1), 15–25. https://doi.org/10.1016/j.bushor.2018.08.004 [Google Scholar] [Crossref]

12. Parsons, K., McCormac, A., Butavicius, M., Pattinson, M., & Jerram, C. (2014). Determining employee awareness using the Human Aspects of Information Security Questionnaire (HAIS-Q). Computers & Security, 42, 165–176. https://doi.org/10.1016/j.cose.2013.12.003 [Google Scholar] [Crossref]

13. Prensky, M. (2001). Digital Game-Based Learning. McGraw-Hill. [Google Scholar] [Crossref]

14. Sheng, S., Holbrook, M., Kumaraguru, P., Cranor, L. F., & Downs, J. (2010). Who falls for phish? A demographic analysis of phishing susceptibility and effectiveness of interventions. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (pp. 373–382). Association for Computing Machinery. https://doi.org/10.1145/1753326.1753383 [Google Scholar] [Crossref]

15. Vishwanath, A., Harrison, B., & Ng, Y. J. (2018). Suspicion, cognition, and automaticity model of phishing susceptibility. Communication Research, 45(8), 1146–1166. https://doi.org/10.1177/0093650215627483 [Google Scholar] [Crossref]

• The Role of Artificial Intelligence in Revolutionizing Library Services in Nairobi: Ethical Implications and Future Trends in User Interaction
• ESPYREAL: A Mobile Based Multi-Currency Identifier for Visually Impaired Individuals Using Convolutional Neural Network
• Comparative Analysis of AI-Driven IoT-Based Smart Agriculture Platforms with Blockchain-Enabled Marketplaces
• AI-Based Dish Recommender System for Reducing Fruit Waste through Spoilage Detection and Ripeness Assessment
• SEA-TALK: An AI-Powered Voice Translator and Southeast Asian Dialects Recognition