Web Application Architecture and Security

Active learning works for this topic because students need to see how abstract identifiers like IP addresses and domain names function in real network communication. When they simulate DNS resolution or trace IP commands, they move beyond memorization to grasp the practical mechanics of internet routing.

• JC 1
• Computing
• 4 activities
• 25 min–40 min

Learning Objectives

1. Compare the structure and function of IPv4 and IPv6 addresses.
2. Explain the hierarchical process by which the Domain Name System (DNS) translates domain names into IP addresses.
3. Analyze the consequences of a hypothetical scenario where domain name to IP address translation fails.
4. Identify potential cybersecurity vulnerabilities related to IP address uniqueness and DNS resolution.

Ready-to-Use Activities

Case Study Analysis

⏱ 35 min·Small Groups

Role-Play: DNS Resolution Chain

Divide class into roles: user, local DNS, root server, TLD server, authoritative server. User requests a domain; servers pass queries hierarchically and return mock IP. Groups rotate roles for three domains, noting delays at each step. Debrief on hierarchy benefits.

Prepare & details

How does the client-server model function in web applications?

Facilitation Tip: During the DNS Resolution Chain, assign each student a distinct role (user, DNS resolver, root server) and provide props like sticky notes to represent packets for clear visual tracking.

Setup: Groups at tables with case materials

Materials: Case study packet (3-5 pages), Analysis framework worksheet, Presentation template

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

Case Study Analysis

⏱ 25 min·Pairs

Command-Line: IP Lookup Lab

Pairs access school computers to run 'nslookup' or 'ping' on sites like google.com.sg and record IP-domain pairs. Compare IPv4 vs IPv6 results. Chart findings and discuss dynamic vs static IPs using 'ipconfig'.

Prepare & details

What are common web security threats like SQL injection and XSS?

Facilitation Tip: For the IP Lookup Lab, pre-configure laptops to show both successful and failed ping attempts, so students observe timeouts and dynamic IP shifts after router resets.

Setup: Groups at tables with case materials

Materials: Case study packet (3-5 pages), Analysis framework worksheet, Presentation template

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

Concept Mapping

⏱ 40 min·Small Groups

Concept Mapping: Classroom Network Diagram

Small groups scan local Wi-Fi devices with tools like Angry IP Scanner, list IPs and resolve domains. Draw network map on chart paper, labeling gateways. Share maps to identify patterns like subnet ranges.

Prepare & details

How can encryption and authentication secure web data?

Facilitation Tip: When creating the Classroom Network Diagram, give groups a mix of IPv4 and IPv6 addresses to include, ensuring they label both node types and connection types accurately.

Setup: Tables or walls with large paper

Materials: Concept cards or sticky notes, Large paper, Markers, Example concept map

• Understand
• Analyze
• Create
• Self-Awareness
• Self-Management

Formal Debate

⏱ 30 min·Whole Class

Formal Debate: No DNS Scenario

Whole class splits into teams to argue impacts of memorizing IPs instead of domains: list pros, cons, real-world effects. Vote and summarize key risks like errors in routing.

Prepare & details

How does the client-server model function in web applications?

Facilitation Tip: In the No DNS Scenario debate, provide a short scenario script to ground the discussion, then time responses strictly to keep arguments concise and evidence-based.

Setup: Two teams facing, audience seating

Materials: Debate proposition card, Research brief for each side, Judging rubric for audience, Timer

• Analyze
• Evaluate
• Create
• Self-Management
• Decision-Making

Teaching This Topic

Teachers should start with concrete, relatable examples—like comparing IP addresses to Singapore postal codes—before introducing abstractions. Avoid overwhelming students with binary or hexadecimal math; instead, emphasize patterns in dotted decimal and colon-separated formats. Research shows that hands-on simulations outperform lectures for network concepts, so prioritize role-plays and command-line tools over slides.

What to Expect

Successful learning looks like students confidently distinguishing IPv4 from IPv6, explaining why domain names exist, and tracing how a DNS request translates to an IP address. They should also recognize dynamic IP changes and the distributed nature of DNS through concrete examples.

Watch Out for These Misconceptions

Common Misconception

During the IP Lookup Lab, watch for students assuming their device’s IP remains unchanged after a router restart. Redirect by having them document the new IP they receive from the DHCP server and compare it to the old one.

What to Teach Instead

Use the ping command before and after restarting the router, then have pairs compare results. Ask them to note the lease time displayed in their router settings to explain why IPs change.

Common Misconception

During the DNS Resolution Chain role-play, watch for students thinking domain names are the actual addresses used by devices. Redirect by having the final 'device' only accept the numeric IP as valid, forcing students to translate the name first.

What to Teach Instead

After the role-play, ask the class to identify which step performed the translation and why the device couldn’t use the name directly. Emphasize the output from the authoritative DNS server in their scripts.

Common Misconception

During the Classroom Network Diagram activity, watch for students drawing a single central DNS server. Redirect by having groups trace a query through multiple levels (root, TLD, authoritative) using colored arrows to show delegation.

What to Teach Instead

Provide a starter diagram with labeled layers but blank spaces for server roles. Require students to fill in at least three levels and explain how each handles part of the request.

Assessment Ideas

Quick Check

After the IP Lookup Lab, present students with a list of mixed IP addresses and domain names. Ask them to classify each and write a one-sentence explanation of DNS’s role in converting domain names to IPs.

Discussion Prompt

During the No DNS Scenario debate, listen for two specific problems students identify (e.g., broken links, inability to access websites) and why these occur due to the lack of translation between names and numbers.

Exit Ticket

After the Classroom Network Diagram activity, ask students to write one difference between IPv4 and IPv6 on an index card and explain why DNS uses a hierarchical structure, using their diagram as evidence.

Extensions & Scaffolding

• After finishing early, challenge students to trace the full DNS resolution path for a domain using the command line, documenting each server contact in a table.
• For students who struggle, provide a partially completed diagram with IP addresses pre-placed, so they only need to add connection arrows and labels.
• For extra time, have groups research and present on how NAT (Network Address Translation) enables multiple devices to share a single public IP address.

Key Vocabulary

IP Address	A unique numerical label assigned to each device connected to a computer network that uses the Internet Protocol for communication. It serves as an identifier for locating and addressing network interfaces.
Domain Name	A human-readable alias for an IP address, used to access websites and online resources. Examples include google.com or moe.gov.sg.
DNS (Domain Name System)	A hierarchical and decentralized naming system for computers, services, or other resources connected to the Internet or a private network. It translates human-friendly domain names into the numerical IP addresses required by network devices.
DNS Resolver	A type of DNS server that queries other DNS servers on behalf of a client to find the IP address corresponding to a requested domain name.