Cybersecurity Threats: Malware and Social Engineering

Active learning works for cybersecurity threats because students need to experience the human and technical nuances of attacks to truly grasp their complexity. Simulations and coding labs make abstract threats concrete, while debates and case studies connect technical details to real-world consequences.

• Grade 11
• Computer Science
• 4 activities
• 35 min–50 min

Learning Objectives

1. Analyze the common techniques used in phishing attacks to manipulate user behavior and extract sensitive information.
2. Evaluate the effectiveness of input sanitization and validation in preventing SQL injection vulnerabilities.
3. Compare and contrast the security risks and user convenience trade-offs associated with man-in-the-middle attacks.
4. Design a basic defense strategy to mitigate the impact of malware on a small business network.
5. Explain the ethical considerations and legal boundaries of ethical hacking within a corporate cybersecurity framework.

Case Study Analysis

⏱ 45 min·Small Groups

Role-Play Simulation: Phishing Defense

Divide class into attackers and defenders. Attackers craft realistic phishing emails using templates. Defenders identify red flags, report, and suggest countermeasures. Debrief as whole class on successes and failures.

Prepare & details

How can developers build systems that are resilient to human error?

Facilitation Tip: During the Role-Play Simulation: Phishing Defense, assign roles clearly so students experience both the attacker's tactics and the defender's hesitation.

Setup: Groups at tables with case materials

Materials: Case study packet (3-5 pages), Analysis framework worksheet, Presentation template

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

Case Study Analysis

⏱ 35 min·Pairs

Coding Lab: SQL Injection Fix

Provide sample web app code with SQL vulnerability. Students in pairs input malicious queries to expose risks, then implement prepared statements and input validation to secure it. Test fixes on shared demo server.

Prepare & details

What is the balance between system security and user convenience?

Facilitation Tip: In the Coding Lab: SQL Injection Fix, provide a deliberately vulnerable code snippet and guide students to patch it step-by-step.

Setup: Groups at tables with case materials

Materials: Case study packet (3-5 pages), Analysis framework worksheet, Presentation template

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

Case Study Analysis

⏱ 40 min·Small Groups

Case Study Dissection: MITM Attacks

Assign real cases like Wi-Fi spoofing incidents. Small groups map attack steps, identify weak points, and propose mitigations such as VPNs or certificate pinning. Present findings to class.

Prepare & details

How do we define ethical hacking in the context of corporate security?

Facilitation Tip: For the Case Study Dissection: MITM Attacks, use a real-world example like a public Wi-Fi eavesdropping incident to make the threat tangible.

Setup: Groups at tables with case materials

Materials: Case study packet (3-5 pages), Analysis framework worksheet, Presentation template

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

Case Study Analysis

⏱ 50 min·Whole Class

Debate Circle: Ethical Hacking Boundaries

Pose key questions on ethical hacking. Split class into pro and con teams for structured debate. Vote and reflect on corporate security implications.

Prepare & details

How can developers build systems that are resilient to human error?

Facilitation Tip: In the Debate Circle: Ethical Hacking Boundaries, assign positions in advance so students prepare arguments and avoid last-minute scrambling.

Setup: Groups at tables with case materials

Materials: Case study packet (3-5 pages), Analysis framework worksheet, Presentation template

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

Teaching This Topic

Approach this topic by combining technical exercises with human-centered reflections, since many threats exploit psychology rather than code. Avoid overwhelming students with jargon; instead, focus on how threats work and why they succeed. Research shows that scenario-based learning improves retention of cybersecurity concepts by up to 30%.

What to Expect

Successful learning looks like students not only defining threats but also demonstrating how to recognize, prevent, and respond to them in context. They should be able to articulate the balance between security and usability and justify their reasoning with examples.

Watch Out for These Misconceptions

Common Misconception

During Role-Play Simulation: Phishing Defense, watch for students assuming antivirus software detects all malware automatically.

What to Teach Instead

Use the simulation to highlight how phishing bypasses tools entirely. Have students analyze real phishing emails from the activity materials to see how behavioral cues, not technical ones, are often the first warning.

Common Misconception

During Coding Lab: SQL Injection Fix, watch for students believing SQL injection only targets large websites with complex databases.

What to Teach Instead

Use the lab’s simple form example to show that any app with user input is vulnerable. Ask students to brainstorm how even a school project database could be exploited if left unprotected.

Common Misconception

During Role-Play Simulation: Phishing Defense, watch for students assuming social engineering relies solely on technical tricks.

What to Teach Instead

Use the mock email exchanges to break down psychological levers like urgency and authority. Have students identify which cues they found most convincing and discuss how design can counter these tactics.

Assessment Ideas

Quick Check

After Role-Play Simulation: Phishing Defense, present students with three short scenarios, such as 'An email claims your school account will be deleted unless you update your password immediately.' Ask them to identify the primary threat and explain why it fits the phishing category.

Discussion Prompt

During Debate Circle: Ethical Hacking Boundaries, pose the question: 'Is it ever acceptable for a company to use social engineering to test employee security awareness?' Facilitate a discussion where students relate their arguments to the threats and defenses they’ve studied.

Exit Ticket

After Case Study Dissection: MITM Attacks, have students define 'man-in-the-middle attack' in their own words and provide one real-world example of how this threat could impact an individual or organization. Collect responses to review for understanding.

Extensions & Scaffolding

• Challenge students to design a phishing email that bypasses typical detection filters, then have peers critique its effectiveness.
• Scaffolding for the SQL Injection Fix: Provide a partially completed sanitization function for students to finish.
• Deeper exploration: Research a high-profile cybersecurity breach and present a 5-minute analysis linking it to the threats studied in class.

Key Vocabulary

Phishing	A cyberattack where attackers impersonate legitimate entities via email, text, or other communication channels to trick individuals into revealing sensitive information or installing malware.
SQL Injection	A code injection technique used to attack data-driven applications, where malicious SQL statements are inserted into an entry field for execution.
Man-in-the-Middle (MitM) Attack	An attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other.
Malware	Short for malicious software, this includes viruses, worms, trojans, ransomware, and spyware, designed to damage, disrupt, or gain unauthorized access to computer systems.
Input Sanitization	The process of cleaning or filtering user-supplied data to prevent malicious code or commands from being executed by an application.