In this paper, we propose an Internet security knowledge building algorithm to build up Internet security knowledge bases by collecting and analyzing real Internet security instances. This knowledge base was then used to design the rules and roles of the iMonsters card game. Therefore, students could learn the basic concepts of attacks and defenses via game playing. Furthermore, for complex cases, students could also discuss the attack tactics collaboratively to find a good solution. After playing the game, the concept map based assessment has been applied, and the results showed that there are 37 out of 53 students get the full rate. We may conclude the iMonsters card game can stimulate the students’ learning motivation and can enhance their skills and knowledge of Internet security.