Glanz: aiMOOC über GPT aiMOOC Action erstellt

2026-08-27T12:48:07Z

aiMOOC über GPT aiMOOC Action erstellt

Neue Seite

{{T}}
[[Category:English]]
[[Category:Cybersecurity Threats and Defences]]

{{BR}}
= Introduction =

Cybersecurity is the practice of protecting computers, networks, accounts, and data from unwanted access, damage, theft, manipulation, or disruption. In this aiMOOC for '''Grades 9–10''', you will learn how common cyber threats work, why people and technology can both create security risks, and how layered defences reduce those risks.

[[File:Security lock symbol-blue.svg|500px|frameless|center]]

You do not need to be a programmer to improve cybersecurity. Everyday choices—checking a message before clicking, using strong authentication, installing updates, protecting backups, and reporting suspicious activity—can stop many incidents before they cause serious harm.

By the end of the course, you should be able to explain the main goals of cybersecurity, distinguish major types of threats, choose suitable defences for realistic situations, evaluate suspicious online behavior, and propose a basic incident-response plan for a school or small organization.

{{#ev:youtube|https://www.youtube.com/watch?v=bPVaOlJ6ln0|500|center}}

{{BR}}
= What Cybersecurity Protects =

Cybersecurity protects '''assets''': things that have value and need protection. Assets can include personal information, school records, photographs, passwords, devices, websites, networks, online accounts, and services.

A useful starting point is the [[English:CIA triad|CIA triad]], which describes three core security goals:

# [[English:Confidentiality|Confidentiality]]: Information should be seen only by people who are authorized to see it.
# [[English:Data integrity|Integrity]]: Information should remain correct, complete, and protected from unauthorized changes.
# [[English:Availability|Availability]]: Systems and data should be accessible when authorized users need them.

[[File:CIAJMK1209-en.svg|500px|frameless|center]]

Imagine a school learning platform. If an outsider reads private student records, confidentiality is harmed. If someone secretly changes grades, integrity is harmed. If an attack makes the platform unavailable during an examination, availability is harmed.

{{BR}}
== Assets, Threats, Vulnerabilities, and Risk ==

These four ideas help you analyze a cybersecurity situation:

'''Asset''' means something worth protecting. '''Threat''' means a possible cause of harm. '''Vulnerability''' means a weakness that could be exploited. '''Risk''' combines the chance that harmful events may occur with the seriousness of their possible consequences.

For example, a student account is an asset. A criminal trying stolen passwords is a threat. Reusing the same password on many websites is a vulnerability. The resulting risk includes account takeover, loss of private data, impersonation, or further attacks on connected services.

A '''defence''' is a safeguard that lowers risk. Good cybersecurity rarely depends on only one safeguard. It uses [[English:Defense in depth|layered defence]], so that if one measure fails, another can still reduce harm.

{{BR}}
= Major Cybersecurity Threats =

{{BR}}
== Malware ==

[[English:Malware|Malware]] is software intentionally designed to cause harm, gain unauthorized access, steal information, spy on users, or disrupt systems. Major forms include viruses, worms, trojans, spyware, and ransomware.

[[File:Malware.png|500px|frameless|center]]

A '''virus''' normally attaches itself to another file or program and spreads when that infected content is run. A '''worm''' can spread between systems with less direct user action. A '''trojan''' pretends to be legitimate or useful software while hiding a harmful purpose. '''Spyware''' secretly monitors activity or collects information. '''Ransomware''' can encrypt data or otherwise block access and demand payment.

Not every slow or malfunctioning computer has malware. Security decisions should be based on evidence such as alerts, unusual account activity, unexpected files, or verified technical findings.

{{BR}}
== Phishing and Social Engineering ==

[[English:Phishing|Phishing]] is a form of [[English:Social engineering|social engineering]] in which an attacker tries to trick you into revealing information, opening a harmful attachment, visiting a fake site, approving a login, or sending money. The attacker often creates urgency, fear, curiosity, or excitement.

[[File:Wikipedia-phishing.svg|500px|frameless|center]]

Warning signs can include an unexpected request for credentials, a strange sender address, unusual spelling or formatting, a link that does not match the claimed organization, a demand for secrecy, or pressure to act immediately. However, modern phishing can look polished, so you should not rely on spelling mistakes alone.

A safer response is to avoid the suspicious link, verify the request through a separate trusted channel, report the message using the organization’s normal process, and delete it when appropriate.

{{#ev:youtube|https://www.youtube.com/watch?v=sg0kQYvTlnc|500|center}}

{{BR}}
== Password and Account Attacks ==

Attackers may try guessed passwords, passwords leaked from another service, or automated lists of common credentials. '''Credential stuffing''' happens when stolen username-and-password combinations from one service are tried on other services. Password reuse therefore turns one breach into a risk for several accounts.

A long, unique password or passphrase is generally safer than a short or reused one. A reputable [[English:Password manager|password manager]] can help generate and store unique passwords so that you do not need to memorize every one.

[[File:Strong passwords are essential for Wikimedia projects - Front.png|500px|frameless|center]]

{{#ev:youtube|https://www.youtube.com/watch?v=3NjQ9b3pgIg|500|center}}

{{#ev:youtube|https://www.youtube.com/watch?v=w68BBPDAWr8|500|center}}

{{BR}}
== Network and Service Attacks ==

Computer networks move information between devices. Attackers may try to intercept traffic, exploit vulnerable services, gain unauthorized access, or overwhelm a service with excessive traffic.

A [[English:Denial-of-service attack|denial-of-service attack]] aims to reduce availability by making a system or network service difficult or impossible for normal users to access. A large distributed denial-of-service attack can use many compromised devices at once.

Untrusted networks can also create privacy risks. When you use public networks, prefer encrypted services, keep devices updated, avoid unnecessary sharing, and follow the security guidance of your school or organization.

{{BR}}
== Human and Physical Risks ==

Cybersecurity is not only about software. A lost unlocked laptop, a password written where others can see it, an unattended logged-in device, or a stranger entering a restricted room can all create security problems.

People are not simply a weak point; informed people are also an important defence. Clear procedures, good communication, sensible access controls, and a culture that encourages reporting mistakes can reduce risk.

{{BR}}
= Building Strong Defences =

{{BR}}
== Authentication and Multifactor Authentication ==

[[English:Authentication|Authentication]] is the process of proving that you are allowed to use an account or system. A password is one form of evidence. [[English:Multi-factor authentication|Multifactor authentication]] adds another factor, such as a security key, authenticator app, or biometric check.

[[File:Multifactorauthentication.jpg|500px|frameless|center]]

MFA reduces the chance that a stolen password alone will be enough for an attacker to enter an account. You should still protect each factor. Never approve a login prompt you did not initiate, and never share a one-time code with someone who asks for it unexpectedly.

{{BR}}
== Updates and Patching ==

Software can contain vulnerabilities. Developers release security updates and patches to fix known problems. Delaying updates can leave a device exposed to weaknesses for which a fix already exists.

Enable trusted automatic updates where appropriate, install updates from official sources, and retire software that no longer receives security support. Updating does not make a system perfectly secure, but it closes many known weaknesses.

{{BR}}
== Backups and Recovery ==

A [[English:Backup|backup]] is a separate copy of important data that can be used after accidental deletion, hardware failure, corruption, or some cyber incidents. A useful backup strategy keeps copies separate enough that one incident does not destroy both the original and every backup.

Backups should be tested. A backup that cannot be restored is not a reliable recovery plan. Schools and organizations also need to decide which systems must be restored first and who is responsible for recovery.

{{BR}}
== Firewalls and Network Segmentation ==

A [[English:Firewall|firewall]] filters network traffic according to rules. It can help block unwanted connections, separate networks with different levels of trust, and reduce unnecessary exposure.

[[File:Firewall.png|500px|frameless|center]]

A firewall is not a magic shield. If a user willingly enters a password on a fake website or installs harmful software, other layers of defence are still needed. Strong security combines network controls with secure configuration, updates, authentication, monitoring, and user awareness.

'''Network segmentation''' divides a network into smaller zones. If one device or area is compromised, segmentation can make it harder for the problem to spread everywhere.

{{BR}}
== Encryption and Access Control ==

[[English:Encryption|Encryption]] transforms readable information into a protected form that requires the correct key or process to read. Encryption can protect data stored on a device and data moving across networks.

[[English:Access control|Access control]] limits who can use particular data or functions. The '''principle of least privilege''' means giving people and programs only the access they need for their role. A student, for example, should not have the same administrative permissions as the person maintaining a school server.

{{BR}}
== Secure Habits for Everyday Use ==

Strong everyday habits create a practical defensive layer. Use unique passwords, turn on MFA when available, lock devices when you step away, install updates, keep backups, check unexpected requests, use trusted download sources, and report suspicious activity promptly.

Security also includes privacy. Before sharing personal information, ask whether the recipient really needs it, how it will be protected, and what could happen if it became public.

{{BR}}
= Detecting and Responding to Incidents =

Prevention is important, but no system can be guaranteed to remain perfectly secure. Organizations therefore prepare to detect, respond to, and recover from incidents.

The current [[English:NIST Cybersecurity Framework|NIST Cybersecurity Framework]] 2.0 organizes high-level cybersecurity outcomes into six functions: '''Govern, Identify, Protect, Detect, Respond, and Recover'''. These functions are designed to work together rather than as a one-time checklist.

'''Govern''' establishes strategy, policy, responsibilities, and risk expectations. '''Identify''' builds understanding of assets and risks. '''Protect''' applies safeguards. '''Detect''' looks for possible attacks and compromises. '''Respond''' takes action after an incident is detected. '''Recover''' restores affected assets and operations.

For a student who notices a suspicious event, the correct response is usually simple: stop interacting with the suspicious content, preserve useful information such as the message or alert when safe to do so, tell a responsible adult or designated school contact, and follow the school’s reporting procedure. Do not investigate by attacking back.

{{BR}}
= Case Study: WannaCry Ransomware =

The WannaCry ransomware outbreak in May 2017 spread widely across many countries and disrupted organizations. It became a memorable example of how malware, vulnerable systems, and large connected networks can combine to create widespread consequences.

[[File:Countries initially affected in WannaCry ransomware attack.png|500px|frameless|center]]

The lesson is not to memorize one old attack. Instead, identify transferable principles: keep supported systems patched, reduce unnecessary exposure, protect important data with tested backups, monitor for unusual behavior, and prepare a response and recovery plan before a crisis.

{{BR}}
= Security, Ethics, and the Law =

Cybersecurity knowledge should be used responsibly. Testing security without permission can harm people, violate privacy, break school rules, or be illegal. Ethical security work requires clear authorization, a defined scope, care with personal data, and responsible reporting of problems.

If you discover a possible weakness in a school system, do not try to prove how far you can exploit it. Record only the minimum safe information needed to explain what you noticed, stop interacting with the weakness, and report it through an approved channel.

Responsible cybersecurity protects people as well as technology.

{{BR}}
= Reliable Reference Points =

For further study, compare what you learn here with trustworthy guidance such as the [[English:NIST Cybersecurity Framework|NIST Cybersecurity Framework]], public cybersecurity advice from CISA, and the English Wikipedia articles on [[English:Computer security|Computer security]], [[English:Phishing|Phishing]], [[English:Malware|Malware]], [[English:Multi-factor authentication|Multi-factor authentication]], and [[English:Ransomware|Ransomware]].

The goal is not to memorize every technical term. You should be able to reason from a situation: What is the asset? What threat is present? What vulnerability is being exploited? What could the impact be? Which defence would reduce the risk most effectively?

{{BR}}
= Interactive Tasks =

{{BR}}
== Quiz: Test Your Knowledge ==

{{MC}}

'''Which three goals form the CIA triad?'''
(Confidentiality integrity availability)
(!Control inspection authorization)
(!Cryptography identity access)
(!Confidentiality isolation authentication)

{{E}}
<br>

{{MC}}

'''What is phishing mainly designed to do?'''
(Trick people into unsafe actions or disclosures)
(!Improve network speed automatically)
(!Create verified software updates)
(!Store backup copies offline)

{{E}}
<br>

{{MC}}

'''Why does multifactor authentication improve account security?'''
(It requires more than one form of evidence)
(!It removes the need for any authentication)
(!It makes every password public)
(!It prevents all software bugs)

{{E}}
<br>

{{MC}}

'''Why are security updates important?'''
(They can fix known vulnerabilities)
(!They guarantee that no attack can happen)
(!They replace the need for backups)
(!They make phishing messages disappear)

{{E}}
<br>

{{MC}}

'''What does ransomware commonly do?'''
(Blocks access to data and demands payment)
(!Improves file compression for free)
(!Creates a second login factor)
(!Filters network traffic by rules)

{{E}}
<br>

{{MC}}

'''What is a firewall mainly used for?'''
(Filter network traffic according to rules)
(!Create strong passwords for every account)
(!Translate encrypted files into plain text)
(!Repair damaged computer hardware)

{{E}}
<br>

{{MC}}

'''Why should backups be tested?'''
(To confirm that data can actually be restored)
(!To make every file public)
(!To weaken account authentication)
(!To disable software updates)

{{E}}
<br>

{{MC}}

'''What does least privilege mean?'''
(Give only the access needed for a role)
(!Give every user administrator access)
(!Share one account with the whole class)
(!Remove all access controls)

{{E}}
<br>

{{MC}}

'''What is the safest first response to an unexpected message asking for your school password?'''
(Avoid the link and verify through a trusted channel)
(!Send the password to test whether the request is real)
(!Forward the message to every student)
(!Disable security software before opening it)

{{E}}
<br>

{{MC}}

'''Which NIST CSF 2.0 function focuses on taking action regarding a detected incident?'''
(Respond)
(!Identify)
(!Protect)
(!Govern)

{{E}}
<br>

{{BR}}
== Memory Game ==

<div class="memo-quiz">
{|
|-
| Phishing || Deceptive message designed to trigger an unsafe action
|-
| Ransomware || Malware that blocks access and demands payment
|-
| Firewall || System that filters network traffic by rules
|-
| Backup || Separate copy used to restore important data
|-
| Encryption || Protection that transforms readable information
|-
| Authentication || Process of proving identity or permission to enter
|}
{{E}}
<br>

{{BR}}
== Drag and Drop ==

<div class="lueckentext-quiz">

{| class="wikitable"
! Match the correct terms.
! Topic
|-
| '''Long unique password'''
| Account protection
|-
| '''Software update'''
| Known vulnerability repair
|-
| '''Offline backup'''
| Recovery from data loss
|-
| '''Firewall'''
| Traffic filtering
|-
| '''Multifactor authentication'''
| Additional identity check
|}
{{E}}

<br>
...
<br />

{{BR}}
== Crossword Puzzle ==

<div class="kreuzwort-quiz">
{|
|-
| Firewall || What filters network traffic according to security rules?
|-
| Phishing || What deceptive technique tries to trick users into unsafe actions?
|-
| Malware || What general term describes intentionally harmful software?
|-
| Backup || What separate copy can help restore lost data?
|-
| Encryption || What process protects readable data by transforming it?
|-
| Integrity || Which CIA goal means protecting information from unauthorized change?
|}
{{E}}
<br>

{{BR}}
== LearningApps ==

<iframe> https://learningapps.org/index.php?s=Cybersecurity+Threats+and+Defences </iframe>

{{BR}}
== Cloze Text ==

<quiz display=simple>
{'''Complete the text.'''<br>
|type="{}"}
Cybersecurity protects valuable digital { assets } from unwanted access, damage, theft, or disruption. The CIA triad includes confidentiality, integrity, and { availability }. A deceptive message that tries to trigger an unsafe action is called { phishing }. Software intentionally designed to cause harm is known as { malware }. Using more than one form of evidence to sign in is called { multifactor authentication }. Security updates can close known { vulnerabilities }. A separate copy of important information is a { backup }. The NIST CSF 2.0 function for taking action after an incident is detected is { Respond }.
</quiz>

<br>

{{BR}}
= Open-Ended Tasks =

{{BR}}
=== Easy ===
# [[English:Phishing checklist|Phishing checklist]]: Create a one-page checklist showing how a student can inspect and safely respond to a suspicious message without clicking its links.
# [[English:Password poster|Password poster]]: Design an English-language poster that teaches students why passwords should be long, unique, and stored safely.
# [[English:Cybersecurity interview|Cybersecurity interview]]: Interview a teacher, parent, or school IT worker about one everyday security habit and summarize the answer in 150 words.
# [[English:Device security photo guide|Device security photo guide]]: Create a five-image guide showing safe actions such as locking a device, updating software, or storing backups without revealing real passwords or private data.

{{BR}}
=== Standard ===
# [[English:Threat model for a school account|Threat model for a school account]]: Identify the asset, possible threats, vulnerabilities, impacts, and at least four practical defences for a fictional school account.
# [[English:Phishing awareness video|Phishing awareness video]]: Produce a two-minute video that shows a fictional phishing attempt and demonstrates a safe response without using real credentials or real victims.
# [[English:Backup experiment|Backup experiment]]: Create sample non-sensitive files, make two backup copies in different safe locations, simulate deletion, restore the files, and document what worked.
# [[English:Cybersecurity incident timeline|Cybersecurity incident timeline]]: Research a well-documented cyber incident such as WannaCry and create a visual timeline focused on causes, consequences, defences, and lessons learned.

{{BR}}
=== Advanced ===
# [[English:Layered defence design|Layered defence design]]: Design a security plan for a fictional school club website using authentication, updates, backups, access control, network protection, and reporting procedures.
# [[English:NIST CSF 2.0 school mapping|NIST CSF 2.0 school mapping]]: Map a fictional school cybersecurity scenario to Govern, Identify, Protect, Detect, Respond, and Recover, explaining how the functions support one another.
# [[English:Security policy comparison|Security policy comparison]]: Compare two publicly available school, library, or youth-organization acceptable-use or cybersecurity policies and evaluate their clarity, privacy protections, and reporting rules.
# [[English:Responsible disclosure simulation|Responsible disclosure simulation]]: Write a fictional responsible disclosure report for a harmless imagined vulnerability, including scope, observation, possible impact, evidence, and a safe recommendation without exploiting any real system.

{{:Open Task - Create a MOOC}}

{{BR}}
= Learning Assessment =

# [[English:Risk reasoning|Risk reasoning]]: Given a fictional school scenario, identify the most valuable asset, the most plausible threat, the key vulnerability, the likely impact, and the defence you would prioritize, with reasons.
# [[English:Phishing decision task|Phishing decision task]]: Analyze three fictional messages, rank them from least to most suspicious, justify your ranking using evidence, and describe a safe response to each.
# [[English:Layered security design|Layered security design]]: Create a defence plan for a student collaboration platform and explain why no single safeguard is sufficient on its own.
# [[English:Incident response scenario|Incident response scenario]]: Explain what a student, teacher, and school IT administrator should each do after a suspected account compromise, including communication and recovery steps.
# [[English:Cybersecurity trade-off|Cybersecurity trade-off]]: Evaluate a proposal that improves convenience by reducing login checks, then argue how security, privacy, usability, and risk should be balanced.
# [[English:Transfer challenge|Transfer challenge]]: Apply the same cybersecurity principles to a smart home, small business, or community organization and explain which risks and defences change.

<br>
<br>

{{BR}}
= Evidence of Learning =

Strong evidence of learning includes accurate explanations of assets, threats, vulnerabilities, risk, confidentiality, integrity, availability, authentication, malware, phishing, backups, firewalls, encryption, and incident response.

You should be able to show '''skills''' in evaluating suspicious messages, selecting proportional defences, reasoning about security trade-offs, communicating concerns clearly, and using cybersecurity knowledge ethically.

Useful '''products''' can include a threat model, awareness poster, safe demonstration video, backup-and-recovery report, incident-response plan, policy comparison, or layered defence design.

Important '''transfer achievements''' include applying the same reasoning to unfamiliar settings, explaining why people and technology both matter, recognizing that no defence is perfect, and choosing actions that reduce risk without causing additional harm.

<br>
<br>

{{BR}}
= OERs on the Topic =

<iframe> https://en.m.wikipedia.org/wiki/Computer_security </iframe>

<br>

{{BR}}
= Linked Learning Areas =

{| align=center
{{:D-Tab}}
'''[[English:Cybersecurity|Cybersecurity]]'''
# [[English:Computer security|Computer security]]
# [[English:Information security|Information security]]
# [[English:Phishing|Phishing]]
# [[English:Malware|Malware]]
# [[English:Authentication|Authentication]]
# [[English:Network security|Network security]]
# [[English:Data backup|Data backup]]
# [[English:Digital literacy|Digital literacy]]
|}

Cybersecurity connects with [[English:Computer science|Computer science]], [[English:Information technology|Information technology]], [[English:Media literacy|Media literacy]], [[English:Digital citizenship|Digital citizenship]], [[English:Ethics|Ethics]], [[English:Privacy|Privacy]], communication skills, and responsible use of online systems. For Grades 9–10, the most important goal is to combine technical understanding with careful decision-making and clear communication.

{{BR}}
= aiMOOC Projects =
[[Category:English]]
[[Category:Cybersecurity Threats and Defences]]
[[Category:Computer science]]
[[Category:Information technology]]
[[Category:Digital literacy]]
[[Category:Media literacy]]
[[Category:Grades 9-10]]
[[Category:AI_MOOC]]
[[Category:GPT aiMOOC]]
{{MT}}

English:Cybersecurity Threats and Defences - Versionsgeschichte

Glanz: aiMOOC über GPT aiMOOC Action erstellt