How Attackers Use Bad Input
Python Programming 2 Grades 9–12 2-day lesson 21 deliverables Teach students how attacks trick people and programs, and how Python input checks guard against some of them. In made-up cases, students name attacks such as phishing, a keylogger and ransomware, and judge the cost to a person and to a business. They fix programs that trust bad input, including a PIN with letters, an order for a negative number of tickets and a blank answer.
● Instant download · Lifetime access · Editable & print-ready
Print + digitalPDF, PowerPoint, Word & Google
Answer keysA key for every page
Built-in assessmentExit tickets + lesson quiz
45-minute daysEvery day planned and timed
Short coding levels practice this lesson in CodeGrove, our code lab that runs in the browser. Students write the program, run it and check it, with no account and nothing to install. Use them with the lesson or as practice later.
See the levelsWhat does this lesson cover?
Students hear about hackers without seeing how a simple program can be fooled. This lesson separates attacks that fool a person from attacks that fool a program that trusts its input. Students fix programs and see what an input check can and cannot stop.
The try-it on Day 1 and the quiz task on Day 2 run online in CodeGrove, our in-browser code lab, so students need a computer or tablet on those days. The Break It, Fix It level practices fixing programs that trust bad input: a sign-in that crashes on a PIN with letters, an order form that takes -5 tickets and an age question that crashes on a blank or wrong-type answer. CodeGrove is free, with no accounts, sign-ins or installs.
Spot the Attack
Students name the attack in made-up cases and judge the harm, on paper with computers closed.
Everything that's included
00 Start Here
- READ FIRST: every file in the lesson and when you use it
- Teacher Guide and Pacing: the plan for each day, what to print and how to grade
- Skills map: which standards each day teaches
01 Present
- One editable PowerPoint deck for both days, 19 slides, with speaker notes
- Slide script: the speaker notes, printed
- Bell ringers: a short warm-up for each day
02 Student Handouts
- Guided notes: one packet for both days, in PDF and editable Word. Students fill in the blanks during the slides, with the word bank on the page
- Vocab slip: the lesson's words and what they mean, on one page
04 Activities
- Spot the Attack: students name the attack in made-up cases and judge the harm, on paper with computers closed
- Quiz task: students fix a program that trusts its input in CodeGrove, working alone, and then take the lesson quiz on paper
05 Assessment
- Exit tickets: quick questions that show who needs more help
- Lesson quiz: 8 multiple-choice questions and 2 written answers about both days, on paper
06 Answer Keys
- 4 answer key files: a key for each day (its bell ringer, notes and exit ticket) and the activity keys, plus the quiz key
Digital: Google Forms™ + Google Slides™
- 3 Google Forms™ of the exit tickets and the quiz, ready to copy into your Drive
- The multiple choice grades itself, and you grade the written answers
- A Google Slides™ copy of the deck, with the same slides and speaker notes, for Google Classroom™
- Give a Form that asks students to read code only on school-managed Chromebooks in locked mode, and use the paper version on other devices
Online: CodeGrove
- In CodeGrove: the quiz task on Day 2, on a computer or tablet for each student
- A try-it on Day 1: students practice the new code in CodeGrove, and nothing is turned in
- Free to use, with no accounts, sign-ins or installs
Why teachers love this lesson
Some attacks fool people and some fool programsStudents sort phishing and keyloggers from bad input that crashes a program. They see that an input check can't stop the first kind.
Every attack has a costStudents judge the harm in made-up cases. They name the cost in money, time or trust to a person or a business.
Print and digitalEvery page is a print-ready PDF, and the Google Forms™ and Google Slides™ let you teach the same lesson in Google Classroom™.
Real online labsStudents write and run real Python in CodeGrove, our in-browser code lab, on a computer or tablet, with no accounts or installs.
A key for every pageEvery day has its own answer key, and every written question has a sample answer and what to look for.
Every day fits a 45-minute classEach day's plan is timed activity by activity against real reading and writing speeds.
What Teachers Say
Be the first to review this
Reviews help me a lot, and they help other teachers pick the right resources for their classes. It takes about a minute.
Leave a reviewQuestions teachers ask
How do I get the files after I buy?
Instant download right after checkout: PowerPoint and Word files you can edit, print-ready PDFs, and links that copy the Google Forms™ and Google Slides™ into your Drive.
Can I buy the whole unit or course instead?
Yes. This lesson is part of the Unit 2 bundle and the complete Python Programming 2 course. Both cost less than buying the lessons one at a time.
Is this AP Computer Science?
No. It is a full-year, non-AP second course in Python for grades 9 to 12. For AP, see our AP Computer Science A and AP CSP courses.
What should students know before this lesson?
Students know how to check input with a function, keep asking, and catch an error with try and except.
Do students need computers?
Yes, on the CodeGrove days. Each student needs a computer or tablet that's online, and CodeGrove needs no account or install. The bell ringers, notes, exit tickets and quiz are on paper.
What formats are the files in?
Every page is a print-ready PDF. The slides are an editable PowerPoint and the guided notes an editable Word file. The exit tickets and the quiz also come as Google Forms™, and the deck as Google Slides™.
Which standards does it cover?
Written for Florida's Intermediate Programming course (9007220). The skills map in the lesson shows which standards each day teaches.