High School Block:

Cybersecurity 120

The field of cybersecurity has evolved significantly, especially in the past decade. The primary purpose of this course permits learner to gain operational skills and will use computational thinking to solve problems and to analyze cybersecurity challenges with an eye to mitigating risks. Learners are inspired through practice of experiential learning of the fundamentals and possibilities of cybersecurity. Learners will be actively engaged in the design, development and evaluation of defensive cybersecurity projects, including awareness, concepts and challenges. The intent of this program of study is to have learners discussing real-world case studies and learning in hands-on activities from day one, while maintaining a high level of engagement throughout the course through a commitment to problem-based and project-based learning.

Cybersecurity concepts are introduced through real-world case studies and hands-on activities that are based on problems, challenges, and projects that become increasingly open-ended. These open-ended challenges permit learners to weigh the benefits, costs, risks, precedents, consequences, and side effects in complex situations. Learners will have an awareness, understanding and experience with cybersecurity, especially in the context of vulnerability identification and assessment, defensive strategizing, risk mitigation, and the forensic removal of cybersecurity threats.

Learners will explore real-world events and criminal activities. Learners should be made aware that the illegal events are not to be glorified nor implemented, other than for the purpose of preventing such events. No activities will contravene Policy 311. The focus is entirely defensive, as learners are involved in forensics, vulnerability analysis, case studies, securing and safeguarding computer images and networks, and similar activities. As much as possible, the activities will be done in a virtual network setting contained in a sandbox environment. There may be opportunities for learners to learn offensive cybersecurity skills, including ethical hacking, largely based on a white hat hacker’s skill set and activities.

Learners will explore topics with digital literacy in mind, including inquiry, problem-solving and decision-making. Inquiry also involves empathy and understanding the challenges that humans are facing. Problem-solving involves understanding human challenges and brainstorming solutions based on a thorough understanding of the people facing the challenge and their expectations for any solution. Decision-making involves both solution selection, project management, project testing and quality assurance, as well as evaluation. Decision-making also involves selecting a development model (waterfall or agile) and understanding the advantages, disadvantages and consequences of using said models.

GRADE 12

Strand: Mindset

Big Idea: Computational thinking

Skill Descriptor: Utilize Computational Thinking to solve issues and harden systems.

Global Competencies: CM, CTPS, SASM

Achievement Indicators:

  1. Analyze, evaluate and continue to be resourceful in the face of ongoing challenges.
  2. Analyze cybersecurity challenges and vulnerabilities involving people, technology or both.
  3. Presented with a situation containing a potential vulnerability, learners suggest a way to resolve the vulnerability.
  4. Combine the solutions to smaller challenges in a way that solves the original larger challenge.
  5. Secure a variety of digital devices using common patterns and solutions.
  6. Adapt a solution to solve a challenge that has common elements but is slightly different (and may involve human and/or technology automation).
  7. Gather data related to a cybersecurity event and analyze that data to determine important elements.
  8. Prove, using data, that a cybersecurity event happened.
  9. Create a list of issues to check with each cybersecurity event.
  10. Discover flaws and security threats on digital devices.

Big Idea: Perseverance

Skill Descriptor: Developing strategies to continue to work in challenging situations.

Global Competencies: CM, CTPS, SASM

Achievement Indicators:

  1. Persevere in work that is complex, ambiguous, non-trivial or difficult to grasp.
  2. Focus on a task with multiple potential solutions, and keep in mind both the task and the larger goal.
  3. Continue to work on a task, even though it is more difficult than previous task.

Big Idea: Proactive

Skill Descriptor: Engaging and anticipating potential future risks.

Global Competencies: CM, CTPS, SASM

Achievement Indicators:

  1. Hypothesize solutions based on the brainstorming, researching, analyzing and discussing possible causes and potential solutions to cybersecurity challenges and vulnerabilities.
  2. Identify and implement proactive strategies for mitigating cybersecurity risks and vulnerabilities, including secure password methodology, software patches and updates.
  3. Create and maintain a list of possible solutions to mitigate a variety of cybersecurity challenges, risks and vulnerabilities.
  4. Use data to prove the mitigation is enabled and effective.
  5. Evaluate policies designed to prevent password attacks.

Big Idea: Ethics

Skill Descriptor: Identify ethical and legal implications of cybersecurity actions and events

Global Competencies: CM, CTPS, SASM

Achievement Indicators:

  1. Identify the classifications of hackers, including white hat, grey hat, and black hat.
  2. Identify the types of hackers, including script kiddies, semi-skilled hackers, and professionals.
  3. Understand and communicate to others the destructive consequences that can be associated with in secure digital data.

Strand: Digital Technologies

Big Idea: Operating Systems

Skill Descriptor: Harden computing environments

Global Competencies: CL, CM, CTPS, SASM

Achievement Indicators:

  1. Set up a basic operating system with appropriate firewalls, antivirus, and user rights.
  2. Secure devices – including mobile devices – that use a variety of operating systems.
  3. Secure devices by creating, modifying and deleting appropriate user account types and access.
  4. Perform digital forensics.
  5. Perform vulnerability management in a Windows OS image and in a Linux OS image.
  6. Collaborate with others to harden a system.

Big Idea: Tools

Skill Descriptor: Examining OS operation through use built-in tools and/or Third-party tools

Global Competencies: CM, CL, CTPS, SASM

Achievement Indicators:

  1. Reconnaissance, exploitation, installation, command and control, lateral movement and exfiltration.
  2. Troubleshoot a cybersecurity event using a variety of tools including vulnerability management.
  3. Use asymmetric encryption involving public and private keys.
  4. Explain the differences between symmetric and asymmetric encryption.
  5. Explain and demonstrate multi-factor authentication using networked platforms.
  6. List and support the principles of confidentiality, system availability and data integrity.

Big Idea: Digital Communications

Skill Descriptor: Examining interconnected computing devices and associated risks

Global Competencies: CL, CM, CTPS, SASM

Achievement Indicators:

  1. Explain how computer hardware functions.
  2. Explain how computer software functions, and how it works together with hardware
  3. Identify an unplugged piece of hardware and know where it needs to be plugged in.
  4. Identify a hardware issue and a software issue and explain some common differences.
  5. Physically identify basic network hardware components such as routers, switches, Ethernet adapters, and wireless adapters.
  6. Explain network principles and designs, including LAN, WWW and the Internet.
  7. Identify steps in a cybersecurity attack and describe how to mitigate against these.
  8. Implement authentication and access control.
  9. Implement encryption.
  10. Implement intrusion detection.
  11. Defend against a variety of malware.
  12. Explain a botnet and can mitigate against them.
  13. Determine if a group of computers is connected to the Internet.
  14. List potential cybersecurity threat agents (natural, human, and technical).

Big Idea: Physical Security

Skill Descriptor: Securing digital technologies from physical risks.

Global Competencies: CL, CM, CTPS, SASM

Achievement Indicators:

  1. Secure devices from physical risk.
  2. Determine if a computer’s keyboard, mouse and video displays are working correctly.
  3. Identify an unplugged piece of hardware and know where it needs to be plugged in.
  4. Create a plan to secure devices in an unfamiliar environment.
  5. Enact access control through the processes of identification, authentication, and authorization.

Strand: Trends

Big Idea: Life-long Learning

Skill Descriptor: Engaging in continual learning in a quickly changing field.

Global Competencies: CL, CM, SGC, CTPS, ICE, SASM

Achievement Indicators:

  1. Determine the usefulness of guides found on the Internet for software and cybersecurity updates.
  2. Demonstrate how diverse thinking practices lead to safer and more secure systems.

Big Idea: Adoption Practices

Skill Descriptor: Anticipating trends in cybersecurity and how to prepare defence.

Global Competencies: CL, CM, SGC, CTPS, ICE, SASM

Achievement Indicators:

  1. Research current trends in cybersecurity.
  2. Communicate adoption practices to harden systems.

Big Idea: Career Pathways

Skill Descriptor: Discover career pathways in cybersecurity.

Global Competencies: CL, CM, SGC, CTPS, ICE, SASM

Achievement Indicators:

  1. Identify careers and pathways in cybersecurity, including extra-curricular, post-secondary, internship, and companies involved in cybersecurity in New Brunswick.

Strand: Collaboration

Big Idea: Teamwork

Skill Descriptor: Ability to work with others to solve problems.

Global Competencies: CL, CM, CTPS, ICE, SASM

Achievement Indicators:

  1. Communicate effectively with my team, and when there is confusion, I can determine how best to improve my communication.
  2. Communicate and collaborate effectively with my team, both online and in-person.
  3. Share an idea clearly and objectively with my team members.
  4. Accept comments and criticism about my contributions and suggestions, as our team develops solutions and work plans.
  5. Design a troubleshooting guide to help others respond to cybersecurity events.
  6. Assess or appraise the efficiency and effectiveness of a solution to a cybersecurity challenge’s solution, whether it was created by me or not.

Big Idea: Communication

Skill Descriptor: Ability to communicate with others with detail appropriate for understanding.

Global Competencies: CL, CM, CTPS, ICE, SASM

Achievement Indicators:

  1. Explain cybersecurity challenges that may involve people, technology or both.
  2. Use cybersecurity vocabulary effectively.
  3. Be given materials (e.g., device images, news article) about a current cybersecurity attack and make a hypothesis about:
    • the type of cybersecurity attack;
    • what components were involved;
    • what actions were taken in the attack;
    • what resulted from the actions taken; and,
    • what might have caused the attack to end, either temporarily or permanently.
  4. Document steps to a cybersecurity solutions to a variety of audiences.
  5. Guide a peer through the process of securing a digital device, including searching for vulnerabilities.
  6. Explain, using data, how a cybersecurity event happened.

Big Idea: Management

Skill Descriptor: Ability to understand the roles that individuals play within an organization.

Global Competencies: CL, CM, CTPS, ICE, SASM

Achievement Indicators:

  1. Part of a team that delegates tasks with timelines, and I can be accountable for my tasks.
  2. identify key roles on effective teams, and I can evaluate the effectiveness of my role on my team.