Technologies · Year 6

Active learning ideas

Introduction to Cybersecurity Threats

Active learning works well for cybersecurity threats because students need to experience how threats behave rather than just hear about them. When students simulate attacks, analyze real examples, and design warnings, they connect abstract risks to their own digital habits.

• ACARA Content Descriptions
• AC9TDI6K03

• 30–45 min
• Pairs → Whole Class
• 4 activities

Activity 01

• Case Study Analysis
• 30 min · Small Groups

Role-Play: Phishing Attack Scenarios

Divide class into attackers and victims. Attackers craft simple phishing messages using props like printed emails. Victims decide responses and discuss outcomes. Debrief as whole class on warning signs.

Explain how different types of cyber threats can harm digital systems.

Facilitation Tip

During the role-play, assign clear roles like 'attacker,' 'victim,' and 'detective' to keep students focused on the mechanics of phishing rather than just acting out parts.

What to look for

Provide students with three scenarios: one describing a virus, one a phishing email, and one a general malware attack. Ask students to write the name of the threat for each scenario and one sentence explaining why it is harmful.

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

Activity 02

• Stations Rotation
• 45 min · Small Groups

Stations Rotation: Threat Identification

Set up stations for viruses (demo file corruption with printed examples), malware (ransomware puzzles), phishing (spot fake emails), and safe practices (password creation). Groups rotate, noting key features at each.

Compare the characteristics of a virus and a phishing scam.

Facilitation Tip

At the station rotation, provide printed examples of real phishing emails and malware screenshots so students practice close observation without relying on guesswork.

What to look for

Present students with a visual example of a phishing email (e.g., a fake bank notification). Ask: 'What makes this email look suspicious?' and 'What should you do if you receive an email like this?'

• Remember
• Understand
• Apply
• Analyze
• Self-Management
• Relationship Skills

Activity 03

• Simulation Game
• 35 min · Pairs

Simulation Game: Virus Spread

Use classroom grid as network. Students place 'infected' cards to show spread paths. Predict and trace consequences, then apply fixes like updates. Discuss prevention strategies.

Predict the potential consequences of clicking on a suspicious link.

Facilitation Tip

During the simulation game, use a timer to show how quickly viruses spread to emphasize the importance of real-time caution and updates.

What to look for

Pose the question: 'Imagine you receive a message from an unknown sender asking you to click a link to claim a prize. What are the risks involved, and how can you decide if it's safe to click?' Facilitate a class discussion on identifying potential threats and safe online practices.

• Apply
• Analyze
• Evaluate
• Create
• Social Awareness
• Decision-Making

Activity 04

• Case Study Analysis
• 40 min · Pairs

Poster Design: Threat Posters

Pairs research one threat, list characteristics and harms. Design posters with visuals and tips. Share in gallery walk for peer feedback.

Explain how different types of cyber threats can harm digital systems.

What to look for

Provide students with three scenarios: one describing a virus, one a phishing email, and one a general malware attack. Ask students to write the name of the threat for each scenario and one sentence explaining why it is harmful.

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

A few notes on teaching this unit

Teachers should model curiosity and caution themselves, treating each activity as a chance to ask, 'What would I do if this happened?' Research shows that students learn best when they analyze real-world cases and practice responses in low-stakes environments. Avoid presenting cybersecurity as a list of rules; instead, let students discover patterns and pitfalls through guided exploration and peer feedback.

Students will confidently identify different types of cyber threats and explain simple prevention strategies. They will demonstrate this through scenario responses, visual designs, and peer discussions that show clear reasoning about online safety.

---

Watch Out for These Misconceptions

• During Role-Play: Phishing Attack Scenarios, students may assume that phishing emails always sound urgent or contain obvious spelling errors.

  Use the role-play to highlight subtle cues by providing polished examples that mimic real bank emails, and ask students to identify mismatched URLs or unusual sender addresses during their debrief.

• During Station Rotation: Threat Identification, students might think that viruses only appear as pop-ups or obvious warnings.

  Show students actual malware screenshots from the stations, and ask them to record how the threat disguises itself as normal files or system processes.

• During Simulation Game: Virus Spread, students may believe that antivirus software stops infections instantly and completely.

  After the simulation, review the game results to show how viruses can spread before detection, and emphasize the need for layered defenses like updates and cautious downloads.

---

Methods used in this brief

• Case Study Analysis
• Stations Rotation
• Simulation Game