Easier to read with cream paper, a tint, more contrast or larger text? Choose your colours and text, once, for every page.

Preview

Malware, botnets and DDoS

This is the first page of the lesson. Read it and have a go at the activities. The rest is in the full lesson.

45 minutes

The free game that was not free

Sam downloads a free game from a strange website. It works. But a week later her phone is slow and the battery is empty by lunch.

Then a message appears: "Your photos are locked. Pay 200 pounds to get them back."

What happened? Sam installed software that was built to cause harm.

Key words

WordWhat it meansExample
MalwareSoftware made to cause harm. The word is short for "malicious software".a virus
VirusMalware that hides inside a file and spreads when you open it.a bad attachment
WormMalware that spreads by itself across a network (linked computers).a copy that jumps from PC to PC
TrojanMalware that pretends to be a useful program.a fake free game
KeyloggerMalware that records every key you press.it steals a typed password
SpywareMalware that secretly watches what you do.it sees the sites you visit
RansomwareMalware that locks your files until you pay.a locked photo folder
BotnetA group of infected devices that one attacker controls.10,000 hacked cameras
DoSDenial of service. Too many requests make a website stop working for real users.a shop site that will not load
DDoSDistributed DoS. The requests come from many devices at once.a botnet attack

The cells students fill in are left blank in this preview.

Quick check: which is which?

Have a go

Quick check: which is which?

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

Six kinds of malware

TypeWhat it doesHarm to a personHarm to a company
VirusHides in a file and spreads when it is openedDamaged filesDamaged files and lost work
WormSpreads alone across a networkA slow deviceA whole network slows down
KeyloggerRecords key pressesStolen passwordsStolen passwords and secrets
RansomwareLocks files until you payLost photosWork stops. Money is demanded
SpywareSecretly watches youLoss of privacyLoss of secrets
Remote access trojanLets the attacker control the device from another placeCamera and files seenAttacker can move to other devices in the network

The cells students fill in are left blank in this preview.

Too many visitors: DoS

A shop has one checkout. It serves one customer a minute. What if 600 fake customers stand in the queue?

Real customers wait a very long time. Then they leave.

A website is like that checkout. A DoS attack sends too many requests. The site is too busy for real users.

Try it: when is a server overloaded?

Code: python
# A server can answer 100 requests each second.
capacity = 100
real_users = 40
attack = 0

total = real_users + attack
print("Requests this second:", total)
print("Overloaded?", total > capacity)

# Change attack to 500 and run it again.

DoS or DDoS?

data-callouts.important.label

DoS: the requests come from one place. You can block that one address.

DDoS: the requests come from thousands of places. It is much harder to block.

The lesson goes on

6 more parts of this lesson are in the full curriculum, with the tasks, the final check and the labs. A college account gives your students all of it.