Computing · JC 1 · Computer Networks and Web Applications · 1.º Período

Web Application Architecture and Security

Introduction to client-server architecture and the basics of web security. Students will explore common vulnerabilities and mitigation strategies.

• MOE Syllabus Outcomes
• 9569 5.3.1 Describe client-server architecture
• 9569 5.3.2 Identify common web vulnerabilities and security measures

About This Topic

Unique addresses, or IP addresses, give every internet-connected device a distinct identifier for accurate data routing, similar to postal codes in Singapore. JC 1 students examine IPv4 dotted decimal notation, like 192.168.1.1, and the longer IPv6 hexadecimal format to meet growing device demands. They also study domain names, such as moe.gov.sg, which offer user-friendly alternatives translated to IPs via the Domain Name System (DNS).

In the Networks and Cyber Security unit, this topic addresses core questions on device uniqueness, website resolution, and consequences of absent translation systems. Students see how DNS resolvers query root, TLD, and authoritative servers hierarchically, ensuring reliable connections. These concepts connect to cybersecurity by highlighting risks like IP spoofing if addresses lack uniqueness.

Active learning suits this topic well since protocols operate invisibly. Students gain clarity through simulations of DNS queries or real command-line lookups, turning abstract mappings into observable steps. Group activities mapping class devices to IPs foster discussion on scalability, solidify understanding, and prepare students for practical network troubleshooting.

Key Questions

1. How does the client-server model function in web applications?
2. What are common web security threats like SQL injection and XSS?
3. How can encryption and authentication secure web data?

Learning Objectives

• Compare the structure and function of IPv4 and IPv6 addresses.
• Explain the hierarchical process by which the Domain Name System (DNS) translates domain names into IP addresses.
• Analyze the consequences of a hypothetical scenario where domain name to IP address translation fails.
• Identify potential cybersecurity vulnerabilities related to IP address uniqueness and DNS resolution.

Before You Start

Introduction to Computer Networks

Why: Students need a foundational understanding of what a network is and how devices communicate before learning about specific addressing schemes.

Basic Internet Concepts

Why: Familiarity with terms like 'website', 'browser', and 'internet' is necessary to understand the purpose of IP addresses and domain names.

Key Vocabulary

IP Address	A unique numerical label assigned to each device connected to a computer network that uses the Internet Protocol for communication. It serves as an identifier for locating and addressing network interfaces.
Domain Name	A human-readable alias for an IP address, used to access websites and online resources. Examples include google.com or moe.gov.sg.
DNS (Domain Name System)	A hierarchical and decentralized naming system for computers, services, or other resources connected to the Internet or a private network. It translates human-friendly domain names into the numerical IP addresses required by network devices.
DNS Resolver	A type of DNS server that queries other DNS servers on behalf of a client to find the IP address corresponding to a requested domain name.

Watch Out for These Misconceptions

Common Misconception

IP addresses never change and are always permanent.

What to Teach Instead

Many IPs are dynamic, assigned temporarily by DHCP servers. Students discover this by pinging their device before and after a router restart in pairs, comparing results. Such hands-on tracking corrects fixed-address assumptions and shows lease mechanics.

Common Misconception

Domain names are the actual addresses devices use to communicate.

What to Teach Instead

Domains translate to numeric IPs via DNS; devices route using numbers only. Role-play simulations let students act as components, seeing translation steps firsthand. Group debriefs reinforce that names aid humans, not machines.

Common Misconception

DNS operates from one central server worldwide.

What to Teach Instead

DNS uses a distributed hierarchy for speed and reliability. Mapping activities reveal root, TLD, and authoritative levels through traced queries. Collaborative diagrams help students visualize delegation, countering single-point ideas.

Active Learning Ideas

Role-Play: DNS Resolution Chain

Divide class into roles: user, local DNS, root server, TLD server, authoritative server. User requests a domain; servers pass queries hierarchically and return mock IP. Groups rotate roles for three domains, noting delays at each step. Debrief on hierarchy benefits.

35 min·Small Groups

Command-Line: IP Lookup Lab

Pairs access school computers to run 'nslookup' or 'ping' on sites like google.com.sg and record IP-domain pairs. Compare IPv4 vs IPv6 results. Chart findings and discuss dynamic vs static IPs using 'ipconfig'.

25 min·Pairs

Concept Mapping: Classroom Network Diagram

Small groups scan local Wi-Fi devices with tools like Angry IP Scanner, list IPs and resolve domains. Draw network map on chart paper, labeling gateways. Share maps to identify patterns like subnet ranges.

40 min·Small Groups

Formal Debate: No DNS Scenario

Whole class splits into teams to argue impacts of memorizing IPs instead of domains: list pros, cons, real-world effects. Vote and summarize key risks like errors in routing.

30 min·Whole Class

Real-World Connections

• Network administrators at companies like DBS Bank use IP addressing schemes and DNS configurations to manage their internal networks and ensure employees can access company resources securely.
• Web developers rely on understanding DNS to register domain names for their websites, such as 'mycoolstartup.com', and configure the necessary DNS records to point to their web servers hosted by providers like Amazon Web Services (AWS).

Assessment Ideas

Quick Check

Present students with a list of IP addresses (e.g., 172.217.160.142) and domain names (e.g., www.google.com). Ask them to write down which is which and briefly explain the role of DNS in connecting the two.

Discussion Prompt

Pose the question: 'Imagine the DNS system suddenly stopped working globally. Describe two specific problems you would immediately encounter when trying to use the internet, and explain why these problems would occur.'

Exit Ticket

On an index card, ask students to write down one difference between IPv4 and IPv6 addresses and one reason why the DNS system is structured hierarchically.

Frequently Asked Questions

Why must every internet device have a unique IP address?

Unique IPs prevent data packets from reaching wrong destinations, ensuring reliable communication across global networks. Without them, collisions occur, like mail to wrong houses. In Singapore's dense networks, this supports seamless access to services like SingPass. Students explore via simulations, grasping routing basics essential for cybersecurity.

How does typing 'google.com.sg' find the correct website?

Your device queries local DNS resolver, which contacts root servers, then .com TLD, then Google's authoritative server for the IP. Recursive caching speeds repeats. This hierarchy distributes load globally. Command-line labs let students trace live resolutions, building confidence in the process.

How can active learning help students grasp IP addresses and domain names?

Active methods like DNS role-plays and nslookup labs make invisible processes visible, as students enact queries or map real IPs. Pair work encourages error-checking, while group diagrams reveal network scale. These approaches boost retention over lectures, aligning with MOE's emphasis on inquiry for JC Computing.

What happens without a system to translate domain names to IPs?

Users must memorize complex numbers like 142.250.190.78, leading to errors, reduced adoption, and insecure browsing. Internet growth stalls without scalability. Debates on this scenario help students value DNS, connecting to cyber risks like phishing via fake domains in Singapore's digital economy.