Computing · Year 8

Active learning ideas

Common Cyber Threats

Active learning works for cyber threats because students need to experience the mechanics of attacks to truly grasp their impact. Simulations let them see how phishing emails trick users, card sorts help them recognize malware traits, and role-plays reveal the consequences of ransomware. This hands-on approach makes abstract threats tangible and memorable for Year 8 learners.

• National Curriculum Attainment Targets
• KS3: Computing - Online Safety and Cybersecurity
• KS3: Computing - Cyber Threats

• 25–45 min
• Pairs → Whole Class
• 4 activities

Activity 01

• Problem-Based Learning
• 35 min · Pairs

Simulation Lab: Phishing Defense

Provide mock emails with phishing cues. In pairs, students identify red flags, draft safe responses, and share findings with the class. End with a debrief on verification steps like checking URLs.

Compare the mechanisms and impacts of different types of malware.

Facilitation Tip

During the Phishing Defense simulation, circulate to listen for students explaining red flags aloud, as this verbalization helps solidify their understanding.

What to look for

Provide students with three scenarios: one describing a virus spreading via email, one detailing a ransomware demand for encrypted files, and one explaining a website being inaccessible due to traffic overload. Ask students to identify the threat in each scenario and write one sentence explaining its primary impact.

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management
• Relationship Skills

Activity 02

• Problem-Based Learning
• 30 min · Small Groups

Card Sort: Malware Matching

Create cards with threat descriptions, mechanisms, and impacts. Small groups sort them into categories, then justify choices. Discuss as a class to refine understanding.

Predict how a ransomware attack could cripple a school's IT system.

Facilitation Tip

For the Malware Matching card sort, pair students who finish early to debate any mismatched pairs, forcing them to defend their reasoning.

What to look for

Pose the question: 'Imagine our school's network is hit by ransomware that locks all student assignment files. What are the immediate problems we would face, and what steps should the IT department take first?' Facilitate a class discussion, guiding students to consider data access, communication, and recovery.

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management
• Relationship Skills

Activity 03

• Problem-Based Learning
• 45 min · Small Groups

Scenario Role-Play: Ransomware Response

Assign roles like IT manager, student, and attacker. Groups act out a ransomware scenario, then redesign with mitigation steps such as backups. Perform and critique.

Design a strategy to mitigate the risk of a phishing scam.

Facilitation Tip

In the Ransomware Response role-play, provide a timer to pressure students into prioritizing actions, mimicking real crisis decision-making.

What to look for

Present students with a simulated phishing email. Ask them to identify at least three red flags that indicate it is a scam and explain why each is a warning sign. For example, 'The sender's email address looks suspicious because...' or 'The urgent tone suggests...'

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management
• Relationship Skills

Activity 04

• Problem-Based Learning
• 25 min · Individual

Network Overload Demo: DDoS Model

Use simple string telephones or online simulators to mimic traffic overload. Individuals add 'attackers' to crash the line, then brainstorm defenses like firewalls.

Compare the mechanisms and impacts of different types of malware.

What to look for

Provide students with three scenarios: one describing a virus spreading via email, one detailing a ransomware demand for encrypted files, and one explaining a website being inaccessible due to traffic overload. Ask students to identify the threat in each scenario and write one sentence explaining its primary impact.

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management
• Relationship Skills

A few notes on teaching this unit

Teach this topic by starting with relatable scenarios—like school exams or assignments being locked—before introducing technical terms. Avoid overwhelming students with jargon; instead, build their mental models through analogies, such as comparing ransomware to a locked locker where only the keyholder (hacker) can open it. Research shows that when students connect threats to their daily lives, they retain concepts better and develop a healthy skepticism toward online risks.

Successful learning looks like students confidently identifying threat types, explaining their mechanisms, and justifying prevention strategies. They should use precise vocabulary to describe risks and demonstrate layered defense thinking in discussions and role-plays. Evidence of this learning appears in their analysis of phishing emails, card sort justifications, and ransomware response plans.

---

Watch Out for These Misconceptions

• During the Simulation Lab: Phishing Defense, watch for students assuming antivirus software catches all phishing emails.

  Use the simulation’s debrief to highlight how antivirus often misses phishing, which relies on human error instead. Ask students to compare their filtered results with the actual phishing attempts they missed.

• During the Card Sort: Malware Matching, watch for students believing all malware requires payment to remove.

  Have students review the ransomware cards in the sort, noting that viruses and worms don’t demand payment. Use this to clarify that only ransomware locks files for profit.

• During the Network Overload Demo: DDoS Model, watch for students thinking DDoS attacks only cause slowness.

  Use the demo’s traffic graph to show how server load spikes to 100%, causing total outages. Ask groups to predict recovery times and explain why full shutdowns occur.

---

Methods used in this brief

• Problem-Based Learning