For this assignment you will create a piece of educational material to inform and guide an average person on what a given cyberattack is and how to protect themselves against it$.$

Topics

Any specific cyberattack that represents a threat to an average user is an acceptable topic. Here are a few examples:

Scams based on social engineering $-$ especially those that result in financial loss and$/$or data compromise $($either phone$-$based or Internet$-$based $-$ your choice$)$

Ransomware $($e$.$g$.$ "CryptoLocker"$)$

Spearphishing attacks $-$ specifically attacks that take advantage of extensive knowledge about the target

Note that the target audience for your project is individuals who are not technically savvy and who are not working in cybersecurity or technical roles, so certain types of attacks may not apply $($for example, use of VLANs for network isolation$).$

Content

Your product must include all of the following content in whatever strategy is appropriate for your chosen medium:

What the attack is and how it works at a non$-$technical level

The potential consequences of being a victim of the attack

At least two examples of where your attack occurred in the real world, and the outcomes if you can find them $($not all public disclosures will reveal the actual outcome$/$resolution$)$

Solid, informed advice for individuals on how to protect themselves from the attack. $($Do some research for this!$)$

There is no specified size, length, etc. for this project $-$ you only need ensure that you have fully covered the above four points.

Minimize use of technical jargon, or if you must use a technical term, define it within your content in a way that would be understood by a person who is not technically savvy. This assignment is worth $100$ points. Points are assigned as follows:

Item Points Penalties

Provided detailed information on a specific cybersecurity attack $30$ Variable point loss if significant or important details are missing.

Provided at least two real$-$life examples of the attack, and explained the potential or real consequences of the attack $2510$ points lost for each real$-$life example missing.

Provided appropriate strategies for mitigation of the attack that can be exercised by non$-$technical users. $30$ Variable point loss if poor$/$incorrect advice given or advice is missing.

Good overall presentation of material in your chosen format $15$ Variable point loss if content is difficult to follow, understand, or is extremely poorly designed.