Creative Dad CompanyCreative Dad Company
TechnologyMath

Cybersecurity Operations Center

Log in to save
Grades 6-860-75 minSource: Creative Dad Company

Students run a mock security operations center. They study pretend login attempts and network activity to spot real attack patterns, then write plain-language rules to defend against them. It is great for anyone who likes puzzles, patterns, and a bit of detective work.

Budget levels

Amazon prices checked Oct 9-10, 2026 and may change

Materials links go to Amazon. Prices are estimates and may change. As an Amazon Associate, Creative Dad Company earns from qualifying purchases.

Quick Start

Digital downloads only.

$0 to buy. Printing noted separately.

Student time: one class period, one day.

Teacher prep / build-ahead: separate from student time.

Scale it

The default plan is one class period on a single day.

Scale back: Fit it into a shorter period, use fewer effects, or run a demo instead of a build.

Scale up: Add one extra effect, or spread the share-out across another day.

Ambiance video

Ambiance video coming soon from Creative Dad Studio

  • Flashlights or school device flashlightsBorrow or school hasuse what you have
  • binary code cardsPrintinguse what you have
  • analog/digital info cardsPrintinguse what you have
  • sheet of paper or fan as noise sourceRequired0 (nothing to buy)use what you have

Full Experience

Required materials for the class.

$0 per class (class of about 30, 6 groups).

Student time: one day.

Teacher prep / build-ahead: separate from student time.

Scale it

The default plan is one school day.

Scale back: Fit the build into one period with fewer effects.

Scale up: Spread the work across days, or add more effects.

Total Transformation

The bigger kit, with every optional item included.

$0 per class (class of about 30, 6 groups).

Student time: one day (one session, one-day event).

Teacher prep / build-ahead: separate from student time.

Scale it

The default plan is one session, a one-day event.

Scale back: Shorten the event, or run a demo for a smaller audience.

Scale up: Spread the build and the event across days, or invite a bigger audience.

Materials

Printed set of mock login records (teacher-prepared; not in the pack); Colored markers, tags or sticky notes (sorting system); Paper for the one-page policy; Flashlights or school device flashlights; binary code cards; analog/digital info cards; sheet of paper or fan as noise source

Materials links go to Amazon. Prices are estimates and may change.

As an Amazon Associate, Creative Dad Company earns from qualifying purchases.

  • Sticky notes assorted

    Colored markers, tags or sticky notes (sorting system)

    Shop

  • Paper

    Paper for the one-page policy

    No link

Steps

  1. Hook: the operations center gets an alert that login records from a branch office are arriving garbled. Each team predicts in writing whether the cause is an attacker or a noisy connection.
  2. Info-card station: read short cards on analog signals (continuous values, like a dimmer switch or an old phone line) and digital signals (on/off pulses coded as 0s and 1s, with error checks like parity bits). Record three facts about how each type handles noise and copying.
  3. Analog noisy-line test: a sender transmits ten 3-digit login codes by setting a flashlight to different brightness levels (0 to 9 scale) while a noise maker waves a sheet of paper in the beam. The receiver writes what they see. Record how many codes arrive exactly right.
  4. Digital noisy-line test: convert the same codes to 4-bit binary and send them as flashlight on/off blinks with the same noise, adding one parity bit per digit so the receiver can flag errors. Record exact codes and flagged errors, then make a bar graph comparing analog and digital accuracy.
  5. Copy test: pass a hand-copied analog sketch of a login record and the same record written in binary through four rounds of copying. Count the errors at each round and add them to a table.
  6. Back on shift: sort a printed batch of mock login records into safe, suspicious, and confirmed threat, and use the parity check to separate records damaged in transit from records that show attack patterns such as many fast failed logins.
  7. Write a claim-evidence-reasoning briefing supporting the claim that digital signals are a more reliable way to encode and send the company's login data than analog signals. Cite at least two info-card facts plus your accuracy percentages and copy-test errors, and name one limit of digital signals.

Standards mapped

  • NGSS · MS-PS4-3

    Integrate qualitative scientific and technical information to support the claim that digitized signals are a more reliable way to encode and transmit information than analog signals.