WEB TECHNOLOGIES
Download the Lessonotes Mobile Ghana app for faster lesson access on Android and iPhone.
Subject: Computing
Class: SHS 3
Term: 2nd Term
Week: 20
Grade code: 3.2.3.LI.3
Strand code: 2
Sub-strand code: 3
Content standard code: 3.2.3.CS.1
Indicator code: 3.2.3.LI.3
Theme: COMPUTATIONAL THINKING (PROGRAMMING LOGIC)
Subtheme: WEB TECHNOLOGIES
This page supports the lesson note with a companion video and a short classroom-ready summary.
For class groups and homework, share this lesson page so learners also get the summary, objectives, and full lesson context.
In today's Ghana, our lives are deeply connected to the internet. We use it for everything from sending money with Mobile Money (MoMo), chatting with friends on WhatsApp and Instagram, to learning on platforms like YouTube. While the internet offers amazing opportunities, it also has dangers. Just like you lock your door to protect your home, you need to learn how to "lock your digital door" to protect your personal information, your money, and your reputation online. This lesson will equip you with the essential knowledge and skills of cyber security to stay safe in the digital world. We will explore the common threats you might face and the practical steps you can take to defend yourself.
This section covers the fundamental ideas you need to understand to be cyber-safe. A. What is Cyber Security? Cyber security is the practice of protecting computers, smartphones, networks, and data from being stolen, damaged, or accessed by unauthorised people (hackers or criminals). Think of it as the digital version of a security guard, a strong lock, and a safe all combined.
The Goals of Cyber Security (The C.I.A. Triad) The main objectives of cyber security can be remembered with the acronym CIA: Confidentiality (Keeping secrets): This means ensuring that information is not disclosed to unauthorised individuals or systems. It’s about privacy. Ghanaian Example: Your private WhatsApp chats are protected by end-to-end encryption. This ensures only you and the person you are talking to can read the messages, guaranteeing confidentiality. If someone hacks your account and reads your chats, confidentiality is breached. Integrity (Keeping data trustworthy): This means maintaining the accuracy and consistency of data. Data should not be altered or tampered with by unauthorised people. Ghanaian Example: When you check your MoMo balance, you expect it to be accurate. If a fraudster could change your balance from GHS 200.00 to GHS 2.00, the integrity of your data would be lost. Availability (Keeping systems working): This means ensuring that systems, networks, and data are accessible to authorised users when they need them. Ghanaian Example: If the West African Examinations Council (WAEC) portal crashes on the day results are released, students cannot check their grades. This is a failure of availability.
Other Important Goals (AAA): Authentication: Proving you are who you claim to be. This is your first line of defence. *Example: Using your password, fingerprint, or a PIN to unlock your phone.* Authorization: The permissions you have after you've been authenticated. *Example: On the school's network, a student might be authorized to access the e-library but not the teachers' grading system.* Auditing (or Accountability): Keeping a record of actions. Systems log who did what and when, so that in case of a breach, there is a trail to follow. B. Common Cyber Threats in Ghana Malware (Malicious Software): Software designed to harm your computer or steal your information. Virus: Attaches itself to a clean file (like a Word document or a program) and spreads when the file is opened. Spyware: Secretly monitors your activities and collects information like passwords and browsing habits. A keylogger is a type of spyware that records everything you type. Ransomware: Locks up your files and demands a ransom (payment) to unlock them. Phishing: A fraudulent attempt to obtain sensitive information such as usernames, passwords, and credit card or MoMo details by disguising as a trustworthy entity in an electronic communication. Ghanaian Example: You receive an SMS: *"CONGRATULATIONS! Your mobile number has won GHS 5,000 in our promo. Click this link to claim your prize: [http://bit.ly/MTN-promo-GH]"*. This is a classic phishing scam to steal your information. Social Engineering: The art of manipulating people so they give up confidential information. The criminals are not hacking your computer; they are "hacking" you (the human). Ghanaian Example: Someone calls you, pretending to be from Vodafone or ECG. They say there is a problem with your account and, to fix it, they need you to tell them your MoMo PIN or a one-time password that was just sent to you. Remember: Your PIN is your secret! C. Best Security Practices: Your Digital Defence Use Strong, Unique Passwords: A weak password is like leaving your front door unlocked. Weak: `kofi`, `123456`, `password` Strong: `MyFavouriteWaakyeIs@Osu!23` (This is a passphrase - long, easy to remember, but hard to guess). Rules for a strong password: Length: At least 12 characters. Complexity: Use a mix of uppercase letters (A-Z), lowercase letters (a-z), numbers (0-9), and symbols (!@#?). Uniqueness: Use a different password for every important account (email, bank, social media). Enable Two-Factor Authentication (2FA): This adds a second layer of security. Even if someone steals your password, they can't log in without the second factor. How it works: After you enter your password (Factor 1: something you know), you must provide a second piece of proof, usually a code from your phone (Factor 2: something you have). Where to use it: On your Gmail, Facebook, Instagram, and any important online account. Look for HTTPS and the Padlock: When you visit a website, look at the address bar. `http://` - Not secure. Data is sent in plain text. `https://` - Secure. The 'S' stands for secure. Data is encrypted, making it unreadable to eavesdroppers. Rule: Never enter sensitive information (passwords, bank details) on a website that does not use `https://`. Keep Software and Systems Updated: Software updates (for your phone's Android/iOS, Windows, and apps like WhatsApp) often contain critical security "patches" that fix weaknesses discovered by developers. Action: When your phone or computer asks to install an update, do it. Use Anti-Malware Software: Install a reputable antivirus program on your computer (e.g., Windows Defender, Avast, AVG) and keep it updated. It will scan for, detect, and remove malware. Be Smart About Wi-Fi: Avoid using public Wi-Fi (e.g., at a café, airport, or mall) for sensitive activities like MoMo transactions or online banking. These networks can be insecure. If you must use public Wi-Fi, use a VPN (Virtual Private Network). A VPN encrypts your internet traffic, creating a secure "tunnel" that protects your data. Manage Your Privacy Settings: On social media (Facebook, Instagram, TikTok), go into your settings and control who can see your posts, your friend list, and your personal information (like your phone number or birthday). Think before you post: Once something is online, it can be difficult to remove it completely.
Guided Practice (With Solutions)