English:Cybersecurity Threats and Defences
Cybersecurity Threats and Defences
Introduction
Cybersecurity is the practice of protecting computers, networks, accounts, and data from unwanted access, damage, theft, manipulation, or disruption. In this aiMOOC for Grades 9–10, you will learn how common cyber threats work, why people and technology can both create security risks, and how layered defences reduce those risks.
You do not need to be a programmer to improve cybersecurity. Everyday choices—checking a message before clicking, using strong authentication, installing updates, protecting backups, and reporting suspicious activity—can stop many incidents before they cause serious harm.
By the end of the course, you should be able to explain the main goals of cybersecurity, distinguish major types of threats, choose suitable defences for realistic situations, evaluate suspicious online behavior, and propose a basic incident-response plan for a school or small organization.
What Cybersecurity Protects
Cybersecurity protects assets: things that have value and need protection. Assets can include personal information, school records, photographs, passwords, devices, websites, networks, online accounts, and services.
A useful starting point is the CIA triad, which describes three core security goals:
- Confidentiality: Information should be seen only by people who are authorized to see it.
- Integrity: Information should remain correct, complete, and protected from unauthorized changes.
- Availability: Systems and data should be accessible when authorized users need them.
Imagine a school learning platform. If an outsider reads private student records, confidentiality is harmed. If someone secretly changes grades, integrity is harmed. If an attack makes the platform unavailable during an examination, availability is harmed.
Assets, Threats, Vulnerabilities, and Risk
These four ideas help you analyze a cybersecurity situation:
Asset means something worth protecting. Threat means a possible cause of harm. Vulnerability means a weakness that could be exploited. Risk combines the chance that harmful events may occur with the seriousness of their possible consequences.
For example, a student account is an asset. A criminal trying stolen passwords is a threat. Reusing the same password on many websites is a vulnerability. The resulting risk includes account takeover, loss of private data, impersonation, or further attacks on connected services.
A defence is a safeguard that lowers risk. Good cybersecurity rarely depends on only one safeguard. It uses layered defence, so that if one measure fails, another can still reduce harm.
Major Cybersecurity Threats
Malware
Malware is software intentionally designed to cause harm, gain unauthorized access, steal information, spy on users, or disrupt systems. Major forms include viruses, worms, trojans, spyware, and ransomware.
A virus normally attaches itself to another file or program and spreads when that infected content is run. A worm can spread between systems with less direct user action. A trojan pretends to be legitimate or useful software while hiding a harmful purpose. Spyware secretly monitors activity or collects information. Ransomware can encrypt data or otherwise block access and demand payment.
Not every slow or malfunctioning computer has malware. Security decisions should be based on evidence such as alerts, unusual account activity, unexpected files, or verified technical findings.
Phishing and Social Engineering
Phishing is a form of social engineering in which an attacker tries to trick you into revealing information, opening a harmful attachment, visiting a fake site, approving a login, or sending money. The attacker often creates urgency, fear, curiosity, or excitement.
Warning signs can include an unexpected request for credentials, a strange sender address, unusual spelling or formatting, a link that does not match the claimed organization, a demand for secrecy, or pressure to act immediately. However, modern phishing can look polished, so you should not rely on spelling mistakes alone.
A safer response is to avoid the suspicious link, verify the request through a separate trusted channel, report the message using the organization’s normal process, and delete it when appropriate.
Password and Account Attacks
Attackers may try guessed passwords, passwords leaked from another service, or automated lists of common credentials. Credential stuffing happens when stolen username-and-password combinations from one service are tried on other services. Password reuse therefore turns one breach into a risk for several accounts.
A long, unique password or passphrase is generally safer than a short or reused one. A reputable password manager can help generate and store unique passwords so that you do not need to memorize every one.
Network and Service Attacks
Computer networks move information between devices. Attackers may try to intercept traffic, exploit vulnerable services, gain unauthorized access, or overwhelm a service with excessive traffic.
A denial-of-service attack aims to reduce availability by making a system or network service difficult or impossible for normal users to access. A large distributed denial-of-service attack can use many compromised devices at once.
Untrusted networks can also create privacy risks. When you use public networks, prefer encrypted services, keep devices updated, avoid unnecessary sharing, and follow the security guidance of your school or organization.
Human and Physical Risks
Cybersecurity is not only about software. A lost unlocked laptop, a password written where others can see it, an unattended logged-in device, or a stranger entering a restricted room can all create security problems.
People are not simply a weak point; informed people are also an important defence. Clear procedures, good communication, sensible access controls, and a culture that encourages reporting mistakes can reduce risk.
Building Strong Defences
Authentication and Multifactor Authentication
Authentication is the process of proving that you are allowed to use an account or system. A password is one form of evidence. Multifactor authentication adds another factor, such as a security key, authenticator app, or biometric check.
MFA reduces the chance that a stolen password alone will be enough for an attacker to enter an account. You should still protect each factor. Never approve a login prompt you did not initiate, and never share a one-time code with someone who asks for it unexpectedly.
Updates and Patching
Software can contain vulnerabilities. Developers release security updates and patches to fix known problems. Delaying updates can leave a device exposed to weaknesses for which a fix already exists.
Enable trusted automatic updates where appropriate, install updates from official sources, and retire software that no longer receives security support. Updating does not make a system perfectly secure, but it closes many known weaknesses.
Backups and Recovery
A backup is a separate copy of important data that can be used after accidental deletion, hardware failure, corruption, or some cyber incidents. A useful backup strategy keeps copies separate enough that one incident does not destroy both the original and every backup.
Backups should be tested. A backup that cannot be restored is not a reliable recovery plan. Schools and organizations also need to decide which systems must be restored first and who is responsible for recovery.
Firewalls and Network Segmentation
A firewall filters network traffic according to rules. It can help block unwanted connections, separate networks with different levels of trust, and reduce unnecessary exposure.
A firewall is not a magic shield. If a user willingly enters a password on a fake website or installs harmful software, other layers of defence are still needed. Strong security combines network controls with secure configuration, updates, authentication, monitoring, and user awareness.
Network segmentation divides a network into smaller zones. If one device or area is compromised, segmentation can make it harder for the problem to spread everywhere.
Encryption and Access Control
Encryption transforms readable information into a protected form that requires the correct key or process to read. Encryption can protect data stored on a device and data moving across networks.
Access control limits who can use particular data or functions. The principle of least privilege means giving people and programs only the access they need for their role. A student, for example, should not have the same administrative permissions as the person maintaining a school server.
Secure Habits for Everyday Use
Strong everyday habits create a practical defensive layer. Use unique passwords, turn on MFA when available, lock devices when you step away, install updates, keep backups, check unexpected requests, use trusted download sources, and report suspicious activity promptly.
Security also includes privacy. Before sharing personal information, ask whether the recipient really needs it, how it will be protected, and what could happen if it became public.
Detecting and Responding to Incidents
Prevention is important, but no system can be guaranteed to remain perfectly secure. Organizations therefore prepare to detect, respond to, and recover from incidents.
The current NIST Cybersecurity Framework 2.0 organizes high-level cybersecurity outcomes into six functions: Govern, Identify, Protect, Detect, Respond, and Recover. These functions are designed to work together rather than as a one-time checklist.
Govern establishes strategy, policy, responsibilities, and risk expectations. Identify builds understanding of assets and risks. Protect applies safeguards. Detect looks for possible attacks and compromises. Respond takes action after an incident is detected. Recover restores affected assets and operations.
For a student who notices a suspicious event, the correct response is usually simple: stop interacting with the suspicious content, preserve useful information such as the message or alert when safe to do so, tell a responsible adult or designated school contact, and follow the school’s reporting procedure. Do not investigate by attacking back.
Case Study: WannaCry Ransomware
The WannaCry ransomware outbreak in May 2017 spread widely across many countries and disrupted organizations. It became a memorable example of how malware, vulnerable systems, and large connected networks can combine to create widespread consequences.
The lesson is not to memorize one old attack. Instead, identify transferable principles: keep supported systems patched, reduce unnecessary exposure, protect important data with tested backups, monitor for unusual behavior, and prepare a response and recovery plan before a crisis.
Security, Ethics, and the Law
Cybersecurity knowledge should be used responsibly. Testing security without permission can harm people, violate privacy, break school rules, or be illegal. Ethical security work requires clear authorization, a defined scope, care with personal data, and responsible reporting of problems.
If you discover a possible weakness in a school system, do not try to prove how far you can exploit it. Record only the minimum safe information needed to explain what you noticed, stop interacting with the weakness, and report it through an approved channel.
Responsible cybersecurity protects people as well as technology.
Reliable Reference Points
For further study, compare what you learn here with trustworthy guidance such as the NIST Cybersecurity Framework, public cybersecurity advice from CISA, and the English Wikipedia articles on Computer security, Phishing, Malware, Multi-factor authentication, and Ransomware.
The goal is not to memorize every technical term. You should be able to reason from a situation: What is the asset? What threat is present? What vulnerability is being exploited? What could the impact be? Which defence would reduce the risk most effectively?
Interactive Tasks
Quiz: Test Your Knowledge
Which three goals form the CIA triad? (Confidentiality integrity availability) (!Control inspection authorization) (!Cryptography identity access) (!Confidentiality isolation authentication)
What is phishing mainly designed to do? (Trick people into unsafe actions or disclosures) (!Improve network speed automatically) (!Create verified software updates) (!Store backup copies offline)
Why does multifactor authentication improve account security? (It requires more than one form of evidence) (!It removes the need for any authentication) (!It makes every password public) (!It prevents all software bugs)
Why are security updates important? (They can fix known vulnerabilities) (!They guarantee that no attack can happen) (!They replace the need for backups) (!They make phishing messages disappear)
What does ransomware commonly do? (Blocks access to data and demands payment) (!Improves file compression for free) (!Creates a second login factor) (!Filters network traffic by rules)
What is a firewall mainly used for? (Filter network traffic according to rules) (!Create strong passwords for every account) (!Translate encrypted files into plain text) (!Repair damaged computer hardware)
Why should backups be tested? (To confirm that data can actually be restored) (!To make every file public) (!To weaken account authentication) (!To disable software updates)
What does least privilege mean? (Give only the access needed for a role) (!Give every user administrator access) (!Share one account with the whole class) (!Remove all access controls)
What is the safest first response to an unexpected message asking for your school password? (Avoid the link and verify through a trusted channel) (!Send the password to test whether the request is real) (!Forward the message to every student) (!Disable security software before opening it)
Which NIST CSF 2.0 function focuses on taking action regarding a detected incident? (Respond) (!Identify) (!Protect) (!Govern)
Memory Game
| Phishing | Deceptive message designed to trigger an unsafe action |
| Ransomware | Malware that blocks access and demands payment |
| Firewall | System that filters network traffic by rules |
| Backup | Separate copy used to restore important data |
| Encryption | Protection that transforms readable information |
| Authentication | Process of proving identity or permission to enter |
Drag and Drop
| Match the correct terms. | Topic |
|---|---|
| Long unique password | Account protection |
| Software update | Known vulnerability repair |
| Offline backup | Recovery from data loss |
| Firewall | Traffic filtering |
| Multifactor authentication | Additional identity check |
...
Crossword Puzzle
| Firewall | What filters network traffic according to security rules? |
| Phishing | What deceptive technique tries to trick users into unsafe actions? |
| Malware | What general term describes intentionally harmful software? |
| Backup | What separate copy can help restore lost data? |
| Encryption | What process protects readable data by transforming it? |
| Integrity | Which CIA goal means protecting information from unauthorized change? |
LearningApps
Cloze Text
Open-Ended Tasks
Easy
- Phishing checklist: Create a one-page checklist showing how a student can inspect and safely respond to a suspicious message without clicking its links.
- Password poster: Design an English-language poster that teaches students why passwords should be long, unique, and stored safely.
- Cybersecurity interview: Interview a teacher, parent, or school IT worker about one everyday security habit and summarize the answer in 150 words.
- Device security photo guide: Create a five-image guide showing safe actions such as locking a device, updating software, or storing backups without revealing real passwords or private data.
Standard
- Threat model for a school account: Identify the asset, possible threats, vulnerabilities, impacts, and at least four practical defences for a fictional school account.
- Phishing awareness video: Produce a two-minute video that shows a fictional phishing attempt and demonstrates a safe response without using real credentials or real victims.
- Backup experiment: Create sample non-sensitive files, make two backup copies in different safe locations, simulate deletion, restore the files, and document what worked.
- Cybersecurity incident timeline: Research a well-documented cyber incident such as WannaCry and create a visual timeline focused on causes, consequences, defences, and lessons learned.
Advanced
- Layered defence design: Design a security plan for a fictional school club website using authentication, updates, backups, access control, network protection, and reporting procedures.
- NIST CSF 2.0 school mapping: Map a fictional school cybersecurity scenario to Govern, Identify, Protect, Detect, Respond, and Recover, explaining how the functions support one another.
- Security policy comparison: Compare two publicly available school, library, or youth-organization acceptable-use or cybersecurity policies and evaluate their clarity, privacy protections, and reporting rules.
- Responsible disclosure simulation: Write a fictional responsible disclosure report for a harmless imagined vulnerability, including scope, observation, possible impact, evidence, and a safe recommendation without exploiting any real system.
Learning Assessment
- Risk reasoning: Given a fictional school scenario, identify the most valuable asset, the most plausible threat, the key vulnerability, the likely impact, and the defence you would prioritize, with reasons.
- Phishing decision task: Analyze three fictional messages, rank them from least to most suspicious, justify your ranking using evidence, and describe a safe response to each.
- Layered security design: Create a defence plan for a student collaboration platform and explain why no single safeguard is sufficient on its own.
- Incident response scenario: Explain what a student, teacher, and school IT administrator should each do after a suspected account compromise, including communication and recovery steps.
- Cybersecurity trade-off: Evaluate a proposal that improves convenience by reducing login checks, then argue how security, privacy, usability, and risk should be balanced.
- Transfer challenge: Apply the same cybersecurity principles to a smart home, small business, or community organization and explain which risks and defences change.
Evidence of Learning
Strong evidence of learning includes accurate explanations of assets, threats, vulnerabilities, risk, confidentiality, integrity, availability, authentication, malware, phishing, backups, firewalls, encryption, and incident response.
You should be able to show skills in evaluating suspicious messages, selecting proportional defences, reasoning about security trade-offs, communicating concerns clearly, and using cybersecurity knowledge ethically.
Useful products can include a threat model, awareness poster, safe demonstration video, backup-and-recovery report, incident-response plan, policy comparison, or layered defence design.
Important transfer achievements include applying the same reasoning to unfamiliar settings, explaining why people and technology both matter, recognizing that no defence is perfect, and choosing actions that reduce risk without causing additional harm.
OERs on the Topic
Linked Learning Areas
Cybersecurity connects with Computer science, Information technology, Media literacy, Digital citizenship, Ethics, Privacy, communication skills, and responsible use of online systems. For Grades 9–10, the most important goal is to combine technical understanding with careful decision-making and clear communication.
aiMOOC Projects
MOOCwiki · Deutsch
Nach dem Lernen ist vor dem Lernen
Entdecke direkt den nächsten Lernkurs. Weitere Inhalte erscheinen, wenn Du weiter nach unten scrollst.
Zur MOOCwiki-HauptseiteMediathek
Mediathek
Mediathek wird aus dem Wiki geladen ...
Keine passenden Inhalte gefunden. Bitte ändere Suche oder Filter.