๐ Using 'Catch the Hacker' to Teach Social Engineering
This lesson plan leverages the 'Catch the Hacker' game to educate students about social engineering techniques. It focuses on identifying manipulative tactics and developing critical thinking skills.
๐ฏ Objectives
- ๐ฏ Students will be able to define social engineering.
- ๐ต๏ธโโ๏ธ Students will be able to identify common social engineering tactics used in the 'Catch the Hacker' game.
- ๐ก๏ธ Students will be able to apply strategies to avoid falling victim to social engineering attacks.
- ๐ค Students will be able to critically analyze scenarios and identify potential social engineering attempts.
๐งฐ Materials
- ๐ป Access to the 'Catch the Hacker' game (online or app).
- ๐ Handout with definitions of common social engineering tactics (Phishing, Pretexting, Baiting, Quid Pro Quo, Tailgating).
- ๐ Scenario cards depicting different social engineering situations.
- โ๏ธ Pens/pencils.
Warm-up (5 minutes)
- ๐ง Icebreaker: Ask students if they have ever received a suspicious email or phone call.
- ๐ฌ Briefly discuss what made them suspicious.
Main Instruction (30 minutes)
- Introduction to Social Engineering (10 minutes)
- ๐ข Define social engineering: The art of manipulating people into divulging confidential information.
- ๐ Explain the different types of social engineering (Phishing, Pretexting, Baiting, Quid Pro Quo, Tailgating). Use the handout.
- ๐ Discuss the importance of being aware of social engineering in today's digital world.
- Playing 'Catch the Hacker' (10 minutes)
- ๐ฎ Have students play 'Catch the Hacker' for a set amount of time.
- โ๏ธ Encourage them to take notes on the types of scams and manipulations they encounter in the game.
- Discussion and Analysis (10 minutes)
- ๐ฃ๏ธ Facilitate a class discussion about the social engineering tactics used in the game.
- โ Ask questions such as: What clues helped you identify the hacker? What tactics did the hacker use to try to trick you? How could you have been more vulnerable to the hacker's tricks?
- ๐ค Connect the game scenarios to real-world examples of social engineering.
๐งช Activity: Scenario Analysis (15 minutes)
- ๐ญ Divide students into small groups.
- ๐ Give each group a scenario card depicting a social engineering situation.
- ๐ค Have the groups analyze the scenario and identify the social engineering tactics being used.
- ๐ข Each group presents their analysis to the class.
โ
Assessment
- โ๏ธ Short quiz on social engineering definitions and tactics.
- ๐ Scenario-based questions where students must identify potential social engineering attempts.
- ๐ฃ๏ธ Class participation in discussions.
๐ก Extension Activities
- ๐ Research famous social engineering attacks.
- โ๏ธ Create a public service announcement about social engineering awareness.
- ๐ค Interview a security professional about their experiences with social engineering.