A module on how data travels: protocols (TCP/IP, UDP, an introduction to BGP and routing), practice with routers, and the physical layer with copper cables and the basics of fibre optics. The Association works on computer systems and networks through practical work.
Key facts
- Age: older primary-school pupils and secondary-school pupils
- Focus:
- Networks: crimping, home network, DNS, routing, hosting
- Cybersecurity: defence, defensive CTF, hardening, forensics
- Self-defence: passwords, 2FA, scams, recovery (personal)
- Prerequisite:
- Networks: curiosity; useful experience with Operating systems
- Cybersecurity: basic familiarity; ethics as the first rule
- Self-defence: Digital literacy
- Ministry of Science and Education (MZO) domain: A, B, D
- Infokup: Informatics fundamentals and DK (+ advanced)
- Scope: 3 sets of learning outcomes from the curriculum, 47 topics
- Progression: groups by level of knowledge, not by age
Module aims
Networks
- map a home network
- explain the path of a page (DNS)
- crimp a cable correctly
- (advanced) route and host a service
Cybersecurity (defensive)
- recognise a class of flaw and its defence
- work only in a sandbox and on authorised systems
- harden a system according to a checklist
Digital self-defence
- set up a password manager, 2FA and a passkey
- build a threat model
- recognise scams and fake voices
- recover an account or device
Learning outcomes
Networks. The participant maps a network, makes a correct cable, analyses traffic and explains the path of a web page to a device.
Cybersecurity (defensive). The participant recognises a class of security flaw, describes its defence and hardens a system according to a checklist.
Digital self-defence. The participant writes and demonstrates a personal security plan, checks accounts for leaks and completes a lost-device exercise.
MZO outcomes (NN 22/2018)
Outcomes are mapped to the Informatics curriculum from the Official Gazette (Narodne novine) 22/2018. Codes are unique only within a track, so the track is stated with each code (OŠ – primary school, gimn – grammar school, PMG – science and mathematics grammar school).
- Networks: A.6.2, A.7.1 (OŠ); A.2.1 (gimn)
- Cybersecurity (defensive): D.7.1 (OŠ); D.1.2, A.2.2 (gimn); B.3.6 (PMG – cryptography)
- Digital self-defence: D.7.1, D.3.2 (OŠ); D.1.2 (gimn)
Levels of mastery
Four levels describe what mastering the module means in practice. A participant progresses by level, not by age.
Networks
- satisfactory: maps a home network with help
- good: explains the path of a page (DNS) and secures Wi-Fi
- very good: crimps a cable and does subnetting/routing
- exceptional: analyses traffic (Wireshark) and hosts a service
Cybersecurity (defensive)
- satisfactory: applies password hygiene and MFA
- good: recognises phishing and a class of flaw
- very good: hardens a system according to a checklist
- exceptional: leads the defence (SIEM/IR) and writes a CTF writeup with a fix
Digital self-defence
- satisfactory: sets a strong password and 2FA
- good: uses a password manager and recognises phishing
- very good: builds a personal threat model
- exceptional: maintains and demonstrates a security plan and recovery after an incident
Breakdown
The breakdown is organised by sets of learning outcomes and levels of knowledge. A participant enrols at the level they have reached, regardless of age. Click a topic for an explanation of what it covers.
Networks
13 topics · older primary-school pupils and secondary-school pupils
Foundation level
crimping a UTP cable
making a network cable (RJ-45)
mapping a home network
who is on the network and how they are connected
DNS
how a page name becomes an IP address
Wi-Fi and security
a wireless network and how to secure it
Advanced level
TCP/IP in depth
layers and reliable transfer (TCP/IP)
subnetting
dividing a network into subnets (IP addresses, mask)
routing and layers (OSI)
how a packet travels; network layers (the OSI model)
NAT
translating private addresses into public ones (NAT)
HTTP/HTTPS/TLS
how the web works and how traffic is encrypted (TLS)
firewalls
filtering traffic with a firewall
IPv6 addressing
the new generation of IP addresses (IPv6)
packet analysis (Wireshark)
capturing and reading network traffic in Wireshark
hosting a service
setting up a service so that others can reach it
Cybersecurity (defensive)
26 topics · older primary-school pupils and secondary-school pupils
Foundation level - ethics and basics
the purpose is DEFENCE (first rule)
everything is done in order to defend, never to attack
sandbox and authorised systems
practise only on permitted, isolated systems
hygiene and passwords
basic security habits and strong passwords
MFA
multi-factor sign-in (more than a password)
recognising phishing
how to spot a scam in an email or a message
defence against social engineering
recognising and triaging manipulation (phishing and beyond)
the CIA triad
confidentiality, integrity, availability
Intermediate level
cryptography (basics and keys)
symmetric/asymmetric encryption and key management
hashing vs encryption
the difference: a digest versus encrypting and decrypting
network defence
firewall, segmentation, traffic monitoring
network monitoring / IDS
monitoring traffic and detecting intrusions (e.g. Snort)
how flaws arise (so that you can spot them)
understanding vulnerabilities in order to defend against them
threat modelling
where a system can fail – defence already at the design stage
reading logs
looking for traces of an attack in the records
introduction to forensics
collecting and analysing digital traces
picoCTF / TryHackMe (sandbox)
defensive CTF challenges in a safe environment
Advanced level
blue-team / SOC basics
a defensive team and a monitoring centre (SOC)
SIEM and log analysis
central collection and analysis of logs (Splunk/Elastic)
MITRE ATT&CK and the kill chain
frameworks for understanding and detecting attacks
threat intelligence
IOCs: hashes, domains, indicators of attack
OS hardening
hardening – closing a system’s weak points
detection and logs
detecting attacks from records and alerts
incident response
what to do when a breach happens (IR)
secure programming (the fix)
writing and correcting code so that it has no flaws
OWASP Top 10 from the defence side
the most common web vulnerabilities and defence against them
forensics (OWASP Juice Shop)
a forensics exercise on an intentionally vulnerable application
Digital self-defence
8 topics · older primary-school pupils and secondary-school pupils
Foundation level
how a password gets cracked (a feel for it)
why weak passwords are cracked quickly
password manager
a tool that remembers strong, different passwords
2FA and passkey
two-factor authentication and passwordless sign-in (passkey)
phishing
recognising and avoiding phishing
lost-phone exercise
what to do if you lose a device
Advanced level
threat model
who and what you are actually defending against
deepfake and a family code word
a fake voice or video and an agreed secret word
recovery after an incident
restoring an account or device after a breach