الأسبوع 4 · الدرس ٢ «التهديدات السيبرانية المتقدمة» (٢): التصيد الموجه وانتحال الشخصية والاستدراج وهجمات الحرمان من الخدمة والتدريبات · 3 دروس
3
A plan to stay safe
ICT Prep 2 Term 1, Unit 1, Lesson 2: pp. 23–27
GoalMake a plan: habits that block each trick and one idea against DDoS.
New words
security update · a fix that closes a weak point in software or a deviceantivirus · a program that finds and removes harmful softwarereport · to tell a trusted adult or the right office about something suspiciousfiltering · checking requests and sending away the ones that look like a flood of fakes
Explanation
A plan is a list of habits that block each danger. To stop a trick message: check who is really asking, in another way, never share passwords or codes, and tell a grown-up. To stop baiting: never plug in a drive you found. To stay protected from malware: let a grown-up install updates and an antivirus. A DDoS attack is not a trick played on you; it is the owner of a website who must defend it. One idea at idea level: a service that watches the requests, notices an unusual flood and sends the extra requests away, so that real visitors can still enter. A student’s part is smaller: do not let your devices be part of a botnet by keeping them updated and by not clicking harmful links. Remember that you are the first line of defence.
Worked examples
Habit
Threat it blocks
never share a password or code
pretexting, spear phishing
let a grown-up update devices
malware, botnets
do not plug in a found drive
baiting
tell a grown-up
all three tricks
A class makes a table of habits. Habit: never share a password or a code. It blocks a pretexting call. Habit: let a grown-up update the devices. It closes weak points that malware could use. Habit: do not plug in a found drive. It blocks baiting.
flood of requests→filtering checks them→fake ones sent away→real students enter
The school website owner asks a technical helper to set up filtering. When a flood of fake requests arrives, filtering sends it away and real students can still open the timetable. This is the owner’s job, not a student’s.
Class activity
Make your own safety card with four habits, each linked to a threat from Weeks 3 and 4. Decorate it and keep it with your school things. Then explain to a family member why updates matter.
Practice
1
Which habit blocks baiting?
Never plug in a drive you found.
2
Why should you check who is really asking by another way?
Because a trickster may pretend to be someone you trust.
3
Who defends a website against DDoS, the student or the owner?
The owner, with technical helpers.
4
Give one idea for defending a school website at idea level.
Filtering: send away the flood of fake requests so real visitors can enter.
