Cybersecurity I - SSS 1 | CMPNOTE

CYBERSECURITY I: MEANING, IMPORTANCE AND COMMON THREATS

Subject: Digital Technologies
Class: SSS 1
Term: Second Term
Week: 6
Duration: 80 Minutes (Double Period)

Learning Objectives

By the end of the lesson, students should be able to:

Define cybersecurity and explain its importance.
Identify common cybersecurity threats.
Explain the meaning and effects of malware.
Describe phishing and identify common warning signs.
Explain hacking and distinguish authorised security testing from unauthorised access.
Recognise basic actions that can reduce cybersecurity risks.

1. Meaning of Cybersecurity

Cybersecurity is the practice of protecting computers, mobile devices, networks, applications and digital information from unauthorised access, damage, theft and other cyber threats.

People use computers and the Internet for learning, communication, banking, business and entertainment. These activities can expose devices and information to criminals, harmful software and accidental loss. Cybersecurity involves using appropriate technology, safe practices and security rules to reduce these risks.

Examples of Things Cybersecurity Protects

Personal information such as names, contact details and account credentials.
School records, assignments and examination results.
Computer systems, phones and tablets.
Online accounts, including email and cloud-storage accounts.
Networks used by schools, businesses and other organisations.
Financial information and online transactions.

2. Importance of Cybersecurity

Cybersecurity is important for individuals, schools, businesses and governments for the following reasons.

A. Protection of Personal Information

It helps prevent unauthorised people from accessing private information such as passwords, contact details and personal documents.

B. Prevention of Financial Loss

Security measures help reduce the risk of online fraud, stolen payment information and unauthorised financial transactions.

C. Protection Against Data Loss

Cybersecurity measures help protect important files against malicious deletion, damage and certain types of cyberattack.

D. Safe Communication

It helps protect email, messaging accounts and online meetings from account theft, impersonation and unauthorised access.

E. Continuity of School and Business Activities

Schools and organisations depend on digital systems to store records and provide services. Cybersecurity helps reduce disruptions caused by attacks and system compromise.

F. Privacy and Trust

Protecting digital information helps individuals and organisations maintain confidence in online services.

Remember: Cybersecurity cannot remove every risk. It aims to reduce risks and help users detect, respond to and recover from security incidents.

3. Common Cybersecurity Threats

A cybersecurity threat is a possible cause of harm to a computer system, network or digital information. A threat may exploit a weakness in a device, application, account or user's behaviour.

Common cybersecurity threats include malware, phishing, hacking, password attacks, social engineering and denial-of-service attacks.

A. Malware

Malware means malicious software designed to harm a device, disrupt its operation, steal information or perform other unauthorised activities.

Malware may enter a device through infected attachments, unsafe downloads, compromised websites, infected removable devices or unpatched software vulnerabilities.

Types of Malware

Type	Meaning	Possible Effect
Virus	Malicious code that attaches itself to a file or program and spreads when the infected host is executed.	May damage files or disrupt computer operations.
Worm	Malware that can copy and spread itself between systems, often through networks.	May spread rapidly and consume system or network resources.
Trojan horse	Malicious software disguised as a legitimate or useful program.	May steal information or allow unauthorised access.
Ransomware	Malware that locks systems or encrypts files and demands payment.	May make important files inaccessible.
Spyware	Software that secretly monitors activities or collects information.	May expose personal information and browsing activity.
Adware	Software that displays advertisements; some forms behave intrusively or track users without appropriate consent.	May display unwanted adverts or affect privacy and performance.
Keylogger	A tool that records keyboard input; malicious versions are used to capture information.	May steal passwords and other typed information.

Signs That a Device May Be Infected

Unexpected pop-ups or advertisements.
Unusual slowdowns or repeated crashes.
Unknown applications or browser extensions.
Unexpected changes to browser settings.
Security warnings or suspicious activity on accounts.
Files becoming inaccessible or displaying unexpected ransom messages.

Important: These signs do not prove that a device has malware. Hardware problems, low storage and legitimate software can also cause similar symptoms. Investigate carefully and seek help from a trusted technician or school ICT support where necessary.

B. Phishing

Phishing is a form of social engineering in which an attacker pretends to be a trusted person or organisation to trick someone into revealing information, clicking a harmful link or taking an unsafe action.

Phishing commonly appears in emails, text messages, social media messages, phone calls or fake websites.

Examples of Phishing

A message pretending to come from a bank asks you to confirm your password through an unfamiliar link.
A fake school account claims that your email will be disabled unless you sign in immediately.
A message promises a prize but requests your account details or a payment before you can receive it.
A fake delivery notification asks you to enter sensitive information on a suspicious website.

Warning Signs of Phishing

Urgent demands: The sender pressures you to act immediately.
Suspicious links: The link destination does not match the claimed organisation.
Unexpected attachments: The message includes a file you were not expecting.
Requests for secrets: The message asks for passwords, one-time codes or sensitive information.
Unusual sender details: The address or account name differs from the genuine organisation's details.
Unrealistic offers: The message promises rewards that seem too good to be true.

How to Respond to Suspected Phishing

Do not click suspicious links or open unexpected attachments.
Verify the request using an official website, known phone number or trusted contact method.
Never disclose passwords or one-time security codes in response to unsolicited messages.
Report suspicious messages to the relevant service provider or school ICT administrator.
If you have already entered a password, change it through the genuine service and inform a trusted adult or administrator when appropriate.

C. Hacking and Unauthorised Access

Hacking is a broad term for exploring, modifying or gaining access to computer systems. It becomes a cybersecurity crime when it involves unauthorised access or other unlawful activity.

Attackers may attempt to exploit software weaknesses, guess passwords, misuse stolen credentials or trick people into granting access.

Types of Hackers

White-hat hackers: Security professionals who test systems with permission to identify weaknesses and improve security.
Black-hat hackers: Individuals who use their skills for unauthorised or malicious purposes.
Grey-hat hackers: Individuals whose activities may fall outside authorisation or accepted rules, even when their stated aim is to identify weaknesses.

Possible Effects of Unauthorised Access

Stolen personal or financial information.
Altered or deleted files.
Compromised email and social media accounts.
Disruption of school or business systems.
Loss of privacy, money or reputation.

Ethical rule: Never attempt to access another person's account, computer or network without permission. Learning about cybersecurity should be done through authorised lessons, practice environments and approved security exercises.

D. Password Attacks

Attackers may try to gain access by guessing weak passwords, using passwords stolen from other services or repeatedly testing possible passwords. Common approaches include:

Password guessing: Trying likely passwords such as common words or simple number combinations.
Brute-force attack: Using repeated attempts to test many possible password combinations.
Credential stuffing: Trying usernames and passwords exposed in one breach on other services.

Ways to reduce these risks include using unique passwords, choosing long passphrases, enabling multi-factor authentication and never sharing account credentials.

E. Social Engineering

Social engineering involves manipulating people into revealing information, giving access or performing actions that weaken security.

Examples include impersonating a school administrator, pretending to be technical support or claiming that an account will be closed unless the victim reveals a security code. The best defence is to verify unusual requests independently and avoid acting under pressure.

F. Denial-of-Service Attacks

A denial-of-service attack attempts to make a website, network or online service unavailable by overwhelming it or interfering with its operation. A distributed denial-of-service attack uses many systems to generate the traffic or requests. Possible effects include slow connections, unavailable websites and disruption of online services.

4. Difference Between a Threat, Vulnerability and Attack

These terms are related but have different meanings.

Term	Meaning	Example
Threat	Something that could cause harm to a system or information.	A criminal attempting to steal passwords.
Vulnerability	A weakness that could be exploited.	Outdated software with a known security flaw.
Attack	An action intended to exploit a weakness or cause harm.	Using a software flaw to gain unauthorised access.

5. Basic Cybersecurity Precautions

Although detailed protection methods will be studied in the next cybersecurity lesson, everyone should practise these basic precautions:

Use strong, unique passwords for different accounts.
Enable multi-factor authentication where available.
Keep operating systems, browsers and applications updated.
Use reputable security software and keep it updated.
Avoid suspicious links, downloads and attachments.
Download software from official or trusted sources.
Back up important files regularly.
Lock devices when they are not in use.
Use privacy settings carefully and limit unnecessary sharing of personal information.
Report suspected security incidents promptly.

6. Classroom Activities

Activity 1: Identify the Threat

For each situation, identify the likely cybersecurity threat.

A student receives a message claiming to be from a bank and asking for a password.
A downloaded program secretly collects information from a computer.
Someone attempts to access another student's email without permission.
A message threatens to delete a person's files unless money is paid.

Activity 2: Examine a Suspicious Message

Consider this example:

"URGENT! Your school account will be deleted in 10 minutes. Click this unfamiliar link and enter your password to keep your account."

Discuss these questions:

Identify two warning signs.
What should the recipient do?
How can the recipient verify whether the warning is genuine?

Activity 3: Threat Classification

In groups, classify examples of malware, phishing, unauthorised access and social engineering. For each example, suggest one way to reduce the risk.

7. Summary

Cybersecurity protects computers, networks, accounts and digital information from threats.
It helps protect privacy, prevent financial loss and maintain the availability of digital services.
Malware is malicious software. Common types include viruses, worms, Trojans, ransomware and spyware.
Phishing uses deceptive messages or websites to trick people into revealing information or taking unsafe actions.
Unauthorised hacking can lead to stolen information, altered files and disrupted services.
Password attacks and social engineering can compromise accounts.
Denial-of-service attacks attempt to disrupt the availability of online services.
Safe behaviour, software updates, strong passwords, multi-factor authentication and backups help reduce cybersecurity risks.

8. Evaluation Questions

Define cybersecurity and state four reasons it is important.
What is malware? Name four types of malware.
Explain phishing and state four warning signs of a phishing message.
What is hacking? Differentiate between authorised security testing and unauthorised access.
Explain social engineering and give two examples.
What is a denial-of-service attack?
Differentiate between a cybersecurity threat, a vulnerability and an attack.
State five basic cybersecurity precautions.

9. Assignment

Write short notes on malware, phishing and hacking.
Describe five warning signs that may indicate a suspicious email or message.
Explain five ways students can protect their online accounts and digital information.
Give three examples of social engineering and explain how a person can respond safely to each.

10. Interactive Revision Quiz

Select one answer for each question and click Submit Answers to see your score.

1. What is cybersecurity?

A. The process of designing posters only B. The process of increasing screen brightness C. The practice of protecting digital systems and information from threats D. A method of printing documents

2. Which of the following is malware?

A. Ransomware B. A monitor C. A keyboard D. A network cable

3. What is the main purpose of phishing?

A. To improve screen resolution B. To create legitimate school notes C. To increase storage capacity D. To deceive people into revealing information or taking unsafe actions

4. Which malware may encrypt files and demand payment?

A. A web browser B. Ransomware C. A spreadsheet D. A firewall

5. Which action is safest when an unexpected message asks for your password?

A. Reply with the password immediately B. Forward it to all your classmates C. Verify the request through an official channel D. Click every link in the message

6. A hacker who tests a system with the owner's permission to improve security is commonly called a:

A. White-hat hacker B. Black-hat hacker C. Phishing victim D. Malware program

7. What is social engineering?

A. Repairing a computer screen B. Creating a spreadsheet C. Increasing a computer's storage capacity D. Manipulating people into revealing information or granting access

8. Which of the following is a possible sign of malware?

A. A properly labelled school folder B. Unexpected pop-ups and unknown applications C. A clean computer desk D. A correctly saved document

9. What is a vulnerability in cybersecurity?

A. A type of computer monitor B. A guaranteed protection against every attack C. A weakness that could be exploited D. A method of printing documents

10. Which practice helps reduce the risk of account compromise?

A. Using unique passwords and enabling multi-factor authentication B. Sharing passwords with friends C. Ignoring security updates D. Opening every unexpected attachment

Cybersecurity I - SSS 1 Lesson Note