Sub Commander Guide Sub Commander Guide
Mission: Digital Defense League
Duration: 60-90 Mins
Topic: CS10 Essentials
Lesson Objective
Students will explore the relationship between hardware and software, identify common cybersecurity threats, and analyze the societal impact of computing through an "unplugged" simulation called The Hardware Heist .
NC Standards Alignment
10.CS.1.1: Explain the functions of hardware and software.10.NI.1.1: Identify cybersecurity threats and defenses.10.IC.1.1: Evaluate the impact of computing on society.
Materials Needed
Hardware Heist Packets (1 per student)
Threat/Tool Cards (1 set per class)
Mission Briefing Slides (Optional)
Timers or a Wall Clock
Mission Sequence
1
The Briefing (10 Mins)
Explain that students are now part of the Digital Defense League . Their goal is to complete a "Hardware Heist"—simulating how a computer processes data while defending against external threats.
Sub Tip: If you don't have a projector, read the "Mission Briefing" section from the student packet aloud with your best "Secret Agent" voice.
2
Hardware Assignment (10 Mins)
Divide the class into groups of 4. Assign each student a hardware role:
Input/Output: Receives raw data and presents finished results.CPU: The "Brain" that solves the logic puzzles.RAM: Holds the puzzle pieces currently being worked on.Hard Drive: Records the final answers and historical data.
3
The Unplugged Simulation (25-30 Mins)
Teams work through the 3 Mission Tasks in their packets.
The Twist: Every 5-7 minutes, announce a "Threat Alert" from the Threat/Tool cards. For example: "Phishing Attack! All RAM students must stand up and spin three times before continuing."
4
The Impact Report (15 Mins)
Students complete the Computing Impact reflection at the end of their packet. This asks them to consider how this technology affects real-world communities.
Classroom Management Tips
Keep the energy high by emphasizing the "Spy" theme. Use the following cues to manage the room.
Potential Roadblocks
"What do the Threat Cards do?"
They represent real-world cyber threats. Some cause delays (simulating malware), while others require "Updates" (software management).
"We finished the puzzles early!"
Challenge them to create their own "Malware" card for the rest of the class to solve.
Discussion Prompts
"Which hardware role was the most stressed during a Threat Alert? Why?"
"How is a computer without antivirus software like a house with no locks?"
"What is one positive way computing has changed how we talk to family?"
Completion Note
Please leave a brief note about how far the class got and any groups that were particularly helpful or disruptive.
Hardware Heist Packet Digital Defense League
MISSION ID: HARDWARE-HEIST-UNPLUGGED
Agent Name:
Mission Date:
Classified Briefing
Welcome, Agents. Our network is under attack. To protect our data, we are going "dark"—simulating our hardware operations manually. Your team represents one complete computer system. You must work together to process the incoming signal, filter out threats, and store the secure data.
Your Team: The Hardware Core
Input/Output (I/O)
You are the bridge. You receive raw data from the outside world and present the final processed information back to the users.
CPU (The Processor)
You are the brain. You perform all logic operations, decoding signals and making decisions based on pre-set instructions.
RAM (Short-Term Memory)
You are the workspace. You hold the data that is currently being used. If the power cuts, your data is gone!
Hard Drive (Long-Term Storage)
You are the vault. You record the final results for permanent storage. Your data remains even when the simulation ends.
Assign your team roles below:
I/O Agent:
CPU Agent:
RAM Agent:
Storage Agent:
Mission 01: The Input Signal
STATUS: ENCRYPTED
Objective: I/O agent receives bits. CPU decodes them. RAM holds them. Storage writes the final word.
0001 = A
0010 = B
0011 = C
0100 = D
0101 = E
0110 = F
0111 = G
1000 = H
Incoming Data Packets (Binary):
0011
CPU Decode
0001
CPU Decode
0110
CPU Decode
0101
CPU Decode
Hard Drive Storage (Write final message here):
Mission 02: Security Filter
STATUS: MONITORING
The CPU must now act as a Firewall . Below are incoming connections. Decide whether to ALLOW or BLOCK based on the security protocol.
FIREWALL RULE: IF (Source == Trusted) AND (Packet == Small), THEN (ALLOW).
Connection Source Packet Size Firewall Decision (Circle One) Unknown User Small (2KB) ALLOW BLOCK Trusted Admin Small (1KB)
Defense Answer Key Defense Answer Key
MISSION: HARDWARE HEIST
TEACHER RESOURCE
Mission 01: The Input Signal
0011C
0001A
0110F
0101E
The stored message should read: CAFE
Mission 02: Security Filter
Connection Size Correct Action Unknown User Small BLOCK Trusted Admin Small ALLOW Trusted Admin Large BLOCK External Server Large BLOCK
Note: Only the Trusted Admin with a Small packet meets both conditions of the rule.
Mission 03: Reflection Guide
Part A (Hardware Impact):
Look for answers mentioning realistic video games, faster weather predictions, or advanced AI. Key concept: Speed translates to complexity.
Part B (Phishing Clues):
Misspelled words or strange email addresses.
Unusual sense of urgency (e.g., "Act Now!").
Links that don't match the destination when hovered.
Requests for personal info/passwords.
Sub Takeaways
This activity reinforces that computers are systems of interlinked parts (CS10.CS.1.1). If any student completes the packet perfectly, have them explain the Input -> Process -> Storage -> Output cycle to a peer.
Threat Alert Cards Threat Alert Cards
Mission: Digital Defense League Unplugged
Instructions for the Sub: Cut these cards out before class. During "Mission 01" and "Mission 02" of the student packet, pull a random card every 5-7 minutes and read the ALERT and ACTION aloud to the class.
PHISHING ATTACK
An agent accidentally clicked a link in a fake email! The system is now struggling to verify identities.
Team Action:
All CPU Agents must close their eyes and count to 15 while the rest of the team waits.
MALWARE INFECTION
A background process is hogging all the memory resources. Everything is slowing down!
Team Action:
The RAM Agent must stand up and do 5 jumping jacks to "clear the cache" before work continues.
SOFTWARE UPDATE
Your operating system just received a critical patch. Your hardware is now running more efficiently!
Team Action:
All teams may skip the next binary decoding step. Jump straight to the next line!
NETWORK LATENCY
The I/O connection is weak. Data packets are being dropped or delayed in transit.
Team Action:
The I/O Agent must use their non-dominant hand for all writing for the next 3 minutes.
DATABASE BACKUP
The Storage system is performing a routine backup. You cannot write new data for a moment.
Team Action:
The Storage Agent must hum a song for 10 seconds before they can write the next answer.
FIREWALL UPGRADE
Security protocols are tightening. You've identified a new threat pattern to block.
Team Action:
The CPU Agent gets to "Auto-Allow" one connection in Mission 2 without checking the rule.
Digital Defense League // Teacher-Controlled Variables
