network security
4 detailed 50-minute lessons with teaching scripts, worked examples, parent guides, and assessment criteria.
Lesson Overview
Total Lessons: 4
Tier: Foundation and Higher
Duration: 50 minutes per lesson (200 minutes total)
Exam Boards: AQA, Edexcel, OCR, Eduqas, CCEA
Tier: Foundation and Higher
Duration: 50 minutes per lesson (200 minutes total)
Exam Boards: AQA, Edexcel, OCR, Eduqas, CCEA
Learning Objectives
- Explain the key ideas of network security
- Apply network security to exam-style questions
- Develop independent study skills
- Build cross-topic connections
Prerequisites
- Read the revision notes for network security first (GCSE Revise summary)
- Key vocab to pre-teach: Key Concept, GCSE Computer Science Exam Tips
- Basic skills: reading the summary notes and answering the practice questions there
Materials & Equipment
- Exercise book, coloured pens
- Ruler
- Printed revision notes (link below)
- Internet for videos (see Resources)
Lesson 1: Introduction: network security
Duration: 50 minutes
Starter Activity (5 minutes)
Quick Recall
Write down everything you already know about network security. Then check against the key terms: Key Concept, GCSE Computer Science Exam Tips. Use a mini-whiteboard or paper.
Main Content (35 minutes)
Parent/Teacher Guide:
Before lesson: Read the script below. Pre-teach key vocab: Key Concept, GCSE Computer Science Exam Tips.
If stuck: Re-read the revision notes (link above), then break the content into smaller steps.
Extension: See the Stretch & Challenge ideas in Lesson 4.
Before lesson: Read the script below. Pre-teach key vocab: Key Concept, GCSE Computer Science Exam Tips.
If stuck: Re-read the revision notes (link above), then break the content into smaller steps.
Extension: See the Stretch & Challenge ideas in Lesson 4.
Teaching Script (35 mins):
Mins 0-5 - Hook: "Today: network security. By the end you will be able to answer exam questions on it unaided. It connects to the rest of Computer Science because the ideas here recur across the spec."
Mins 5-20 - Direct Instruction: Work through the core ideas below one at a time; after each, ask your student to explain it back in their own words.
Mins 20-30 - Guided Practice: Model the worked example together, then let your student attempt the first practice question with guidance.
Mins 30-35 - Independent Practice: 2-3 practice questions from Lesson 3 below, with immediate feedback.
Mins 0-5 - Hook: "Today: network security. By the end you will be able to answer exam questions on it unaided. It connects to the rest of Computer Science because the ideas here recur across the spec."
Mins 5-20 - Direct Instruction: Work through the core ideas below one at a time; after each, ask your student to explain it back in their own words.
Mins 20-30 - Guided Practice: Model the worked example together, then let your student attempt the first practice question with guidance.
Mins 30-35 - Independent Practice: 2-3 practice questions from Lesson 3 below, with immediate feedback.
First Look
Start with the revision notes summary, then attempt: Explain the difference between symmetric and asymmetric encryption.
Plenary (5 minutes)
Check Out
Your student states one thing they learned and one question they still have about network security.
Lesson 2: Core Concepts: network security
Duration: 50 minutes
Starter Activity (5 minutes)
Review Previous Lesson
Quick recap: write 3 key points from Lesson 1 on network security. Check them against the notes below.
Main Content (35 minutes)
Key Concept: Networks are vulnerable to unauthorised access, data theft, and malicious attacks because data travels across shared infrastructure. Effective network security uses multiple methods to protect data and systems.
Definition: Authentication is the process of verifying that a user is who they claim to be. It ensures that only authorised people can access a system or network.
Definition: Two-factor authentication requires the user to provide two different types of evidence to prove their identity. This combines something you KNOW (password) with something you HAVE (phone/token) or something you ARE (biometric).
Definition: Encryption is the process of converting plaintext data into ciphertext (unreadable form) using an encryption algorithm and a key. Only someone with the correct decryption key can convert it back to readable plaintext.
Definition: Symmetric encryption uses the SAME key to encrypt and decrypt data. Both the sender and receiver must have the same secret key.
Definition: Asymmetric encryption uses a PAIR of keys: a public key (shared openly) and a private key (kept secret). Data encrypted with the public key can only be decrypted with the matching private key.
| Term | Meaning | Example |
|---|---|---|
| Password | Secret text known only to user | Simple, cheap, widely supported |
| Biometrics | Unique physical characteristic | Very hard to forge, can't forget |
| 2FA | Two different types of evidence | Much stronger than single factor |
| Keys used | One (same for encrypt and decrypt) | Two (public and private key pair) |
| Speed | Fast | Slower |
| Key distribution | Problem - must share secret key securely | No problem - public key can be shared openly |
| Security risk | Key can be intercepted during sharing | Private key must be kept secret |
| Use case | Bulk data encryption (fast) | Secure key exchange, digital signatures |
Practice (10 minutes)
Q: Explain the difference between symmetric and asymmetric encryption.
Answer: Symmetric encryption uses the same key for both encryption and decryption. It is fast but the key must be shared securely between sender and receiver. Asymmetric encryption uses a pair of keys: a public key (shared openly) for encryption and a private key (kept secret) for decryption. It is slower but solves the key distribution problem.
Plenary (5 minutes)
Explain Back
Your student teaches the key points back to you without looking. Fill any gaps immediately.
Lesson 3: Application: network security
Duration: 50 minutes
Starter Activity (5 minutes)
Quick Recall
Recall the key terms: Key Concept, GCSE Computer Science Exam Tips. Define each in one sentence.
Main Content (35 minutes)
Parent/Teacher Guide: Let your student attempt each question alone first, then compare with the model answer. Award method marks for correct working even if the final answer is wrong.
Q1: Explain the difference between symmetric and asymmetric encryption.
Answer: Symmetric encryption uses the same key for both encryption and decryption. It is fast but the key must be shared securely between sender and receiver. Asymmetric encryption uses a pair of keys: a public key (shared openly) for encryption and a private key (kept secret) for decryption. It is slower but solves the key distribution problem.
Q2: What is two-factor authentication? Give an example.
Answer: Two-factor authentication requires two different types of evidence to verify identity: something you know (password/PIN), something you have (phone/token), or something you are (biometric). Example: logging into online banking requires your password (know) and a code sent to your phone (have).
Q3: How does a firewall using packet filtering work?
Answer: A firewall using packet filtering examines each data packet's header information (source IP, destination IP, port numbers, protocol) and compares it against a set of predefined rules. Packets matching allowed rules are permitted through; packets matching denied rules or not matching any rule are blocked.
Q4: What is MAC address filtering and what is its main weakness?
Answer: MAC address filtering only allows devices with pre-approved MAC addresses to connect to a network. Its main weakness is that MAC addresses can be spoofed - an attacker can configure their device to use an approved MAC address and bypass the filter.
Q5: Explain the principle of defence in depth and why it is important.
Answer: Defence in depth uses multiple layers of different security measures so that if one layer fails, others still provide protection. It is important because no single security measure is foolproof - each has weaknesses. By combining methods like firewalls, encryption, authentication, and MAC filtering, the overall security is much stronger than any single method alone.
Plenary (5 minutes)
Error Review
Review any questions answered incorrectly. Identify whether the error was knowledge, method, or reading the question.
Lesson 4: Exam Practice: network security
Duration: 50 minutes
Starter Activity (5 minutes)
Command Words
Review what these command words require: state (one point), describe (say what happens), explain (say why), compare (both sides), evaluate (judgement).
Main Content (35 minutes)
Extended Answer
Extended question: Full-Mark Response A company network uses a firewall and encryption. Explain two additional security measures the company should implement, justifying why each is needed despite the existing measures. [4 marks] <div class="
1. Antivirus/Anti-malware software: A firewall cannot detect malware that is already on a device or that a user downloads intentionally (e.g. from a phishing email). Antivirus software scans files and programs for known malware signatures, quarantining or removing threats that bypass the firewall. 2. User authentication (strong passwords + multi-factor authentication): Encryption protects data in transit but does not prevent unauthorised access if an attacker obtains valid credentials. Strong password policies (minimum length, complexity) and MFA (requiring a second verification step like a phone code) significantly reduce the risk of account compromise, even if passwords are leaked.
Exam Tips: Know all authentication methods and their strengths/weaknesses | Be clear on symmetric vs asymmetric: same key vs public/private key pair | For firewalls, explain packet filtering with specific rule examples | Always mention MAC spoofing as a weakness of MAC filtering | Defence in depth: multiple layers, different types, redundancy | When asked "how to secure a network," combine multiple methods
Common Errors: ✗ Thinking a firewall alone makes a network completely secure ✓ A firewall filters traffic based on rules but cannot prevent all threats — it doesn't protect against phishing, insider threats, or malware downloaded by users. ✗ Confusing encryption and authentication ✓ Encryption scrambles data so only authorised parties can read it. Authentication verifies the identity of a user or device. They serve different security purposes. ✗ Believing SSL/TLS makes a website completely safe ✓ SSL/TLS encrypts data in transit between browser and server. It doesn't guarantee the website itself is legitimate or that the server is secure — it only protects the connection. ✗ Not understanding the difference
Stretch & Challenge (Grade 8-9):
- Synoptic links: explain how network security connects to another Computer Science topic you have studied
- Real-world: research one real-world use or example of network security
- Critical: "What are the limitations of the models used in network security?"
Plenary (5 minutes)
Assessment Criteria
- Got it: Confident explanation + correct worked examples
- Getting there: Main points OK, needs support with detail
- Not yet: Confused on key concepts - re-run Lesson 2
Homework & Consolidation
- Consolidation: Re-answer any Lesson 3 practice questions answered incorrectly (20 mins)
- Retrieval: Write flashcards for the key terms: Key Concept, GCSE Computer Science Exam Tips (10 mins)
- Exam practice: One past-paper question on network security from the board websites (15 mins)
- Extension: Explain network security to someone else in your own words (10 mins)