Database Administrator Roles, Security and Encryption for SS 3

Class: SS 3
Term: First Term
Week: 3
Age: 16 years
Duration: 45 minutes
Subject: Data Processing
Curriculum Theme: Data Base Security
Previous Lesson: Database Security and Access Control Methods
Topic: Data Base Security
Subject Matter: role of the database administrator in security: encryption

Specific Objectives

By the end of the lesson, pupils/students should be able to:

Cognitive Domain

• State at least three roles of a database administrator in ensuring security.
• Define encryption and decryption.
• Identify the two basic types of encryption.

Affective Domain

• Appreciate the importance of database security in protecting information.
• Value the role of a Database Administrator in maintaining data integrity and confidentiality.

Psychomotor Domain

• Explain how a DBA implements security measures like password management.
• Differentiate between symmetric and public key encryption with examples.

Reference Materials

The following resources were used in planning this lesson:

• 2025 Revised 9 Years Basic Education Curriculum
• Relevant State Unified Scheme of Work
• A suitable Data Processing textbook for SS 3
• The HeadTeacher Scheme of work

Instructional Materials

The teacher will teach this lesson with the aid of:

• The internet
• Whiteboard/Blackboard
• Markers/Chalk
• Projector (optional, for showing internet resources)
• Computer with internet access (optional, for live demonstration)

Rationale for the Lesson

This lesson is important because data security is fundamental in the digital age. Understanding the Database Administrator’s role and encryption techniques helps students grasp how sensitive information is protected, preparing them for careers in data management and cybersecurity. It builds a foundation for understanding secure data handling practices.

Prerequisite/Previous Knowledge

Students should have a basic understanding of what a database is, its components, and general computer security concepts.

Lesson Content/Board Summary

Data Base Security

Role of the Database Administrator (DBA) in Security

The Database Administrator (DBA) plays a crucial role in maintaining the security of a database. Their responsibilities include:

1. Access Control: Managing who can access the database and what actions they can perform (e.g., read, write, delete).
2. Password Management: Ensuring strong password policies are enforced and regularly updated for all database users.
3. User Authentication: Setting up and managing user accounts and authentication methods to verify user identities.
4. Data Backup and Recovery: Implementing regular backup procedures and disaster recovery plans to protect data from loss or corruption.
5. Auditing and Monitoring: Tracking database activities to detect suspicious behaviour and potential security breaches.
6. Encryption Implementation: Applying encryption to sensitive data to protect it from unauthorised access.
7. Security Patch Management: Ensuring the database system is updated with the latest security patches to fix vulnerabilities.

Encryption and Decryption

Encryption and decryption are fundamental processes in data security:

1. Encryption: This is the process of converting plain, readable data (plaintext) into an unreadable, coded format (ciphertext) to prevent unauthorised access. It scrambles the data using an algorithm and a key.
2. Decryption: This is the reverse process of encryption. It converts the unreadable ciphertext back into its original readable plaintext using a specific key.

The purpose of encryption in database security is to protect sensitive data (like personal information, financial records) both when it is stored (data at rest) and when it is being transmitted (data in transit).

Types of Encryption

There are two basic types of encryption:

1. Symmetric-Key Encryption:
   1. This type of encryption uses a single, secret key for both encryption and decryption.
   2. The sender and receiver must both have this shared secret key.
   3. Examples include AES (Advanced Encryption Standard) and DES (Data Encryption Standard).
   4. It is generally faster than public-key encryption.
2. Public-Key Encryption (Asymmetric Encryption):
   1. This type uses a pair of mathematically linked keys: a public key and a private key.
   2. The public key can be shared with anyone and is used to encrypt data.
   3. The private key is kept secret by the owner and is used to decrypt data encrypted with the corresponding public key.
   4. Data encrypted with the public key can only be decrypted by the corresponding private key, and vice-versa.
   5. Examples include RSA (Rivest–Shamir–Adleman) and ECC (Elliptic Curve Cryptography).
   6. It is generally slower but provides better security for key exchange and digital signatures.

Teaching Methods/Instructional Techniques

Discussion, Explanation, Question and Answer, Guided Practice, Demonstration.

Instructional Procedures

Step 1: Introduction

Time: 5 minutes

Teaching Skill: Questioning/Engagement

Teacher’s Activity: The teacher greets the students and asks questions to activate their prior knowledge about databases and the importance of protecting information. For example: “What is a database?” “Why is it important to keep our personal information safe online?”

Pupils’ Activity: Students respond to the teacher’s questions, sharing their understanding of databases and data protection.

Learning Point: Importance of data security

Step 2: Role of the Database Administrator in Security

Time: 8 minutes

Teaching Skill: Explanation/Elucidation

Teacher’s Activity: The teacher explains the various roles of a database administrator (DBA) in ensuring database security, providing examples like managing user passwords, setting access controls, and performing backups. The teacher will refer to the internet for current examples if possible.

Pupils’ Activity: Students listen attentively, ask questions for clarification, and take notes on the roles of a DBA.

Learning Point: DBA security responsibilities

Step 3: Defining Encryption

Time: 7 minutes

Teaching Skill: Guided Definition

Teacher’s Activity: The teacher introduces the concept of encryption and leads the students to define it by asking what it means to “scramble” or “code” information to keep it secret. The teacher writes the definition on the board.

Pupils’ Activity: Students participate in defining encryption and copy the definition into their notebooks.

Learning Point: Meaning of encryption

Step 4: Defining Decryption

Time: 5 minutes

Teaching Skill: Comparative Definition

Teacher’s Activity: Following the definition of encryption, the teacher then guides students to define decryption as the reverse process, explaining how coded information is returned to its readable form. The teacher writes the definition on the board.

Pupils’ Activity: Students define decryption and copy the definition into their notebooks.

Learning Point: Meaning of decryption

Step 5: Symmetric-Key Encryption

Time: 7 minutes

Teaching Skill: Detailed Explanation

Teacher’s Activity: The teacher explains symmetric-key encryption, highlighting that it uses a single, shared secret key for both encrypting and decrypting data. The teacher provides simple analogies or diagrams to illustrate the concept.

Pupils’ Activity: Students listen, ask questions, and note down the key characteristics of symmetric encryption.

Learning Point: Symmetric encryption concept

Step 6: Public-Key Encryption

Time: 7 minutes

Teaching Skill: Comparative Explanation

Teacher’s Activity: The teacher explains public-key (asymmetric) encryption, contrasting it with symmetric encryption by explaining the use of a pair of keys (public and private). The teacher explains how each key is used for encryption and decryption.

Pupils’ Activity: Students listen, compare the two types, and note down the characteristics of public-key encryption.

Learning Point: Public-key encryption concept

Step 7: Evaluation/Review

Time: 5 minutes

Teaching Skill: Questioning/Assessment

Teacher’s Activity: The teacher evaluates the learning by asking the following questions:

1. Mention two roles of a Database Administrator in ensuring security.
2. What is encryption?
3. Differentiate between symmetric-key and public-key encryption.

Pupils’ Activity: Pupils answer orally and in writing.

Learning Point: Understanding DBA roles and encryption

Step 8: Note-Taking

Time: 4 minutes

Teaching Skill: Guided Writing

Teacher’s Activity: The teacher guides pupils/students to copy the essential Board Summary notes on DBA roles, encryption, decryption, and types of encryption into their notebooks.

Pupils’ Activity: Pupils/students copy the notes carefully into their notebooks.

Learning Point: Recording lesson content

Step 9: Conclusion

Time: 2 minutes

Teaching Skill: Summarisation

Teacher’s Activity: The teacher briefly summarises the key learning points of the lesson, reinforcing the importance of database security and the DBA’s role, as well as the basic understanding of encryption. The teacher encourages students to continue exploring these topics.

Pupils’ Activity: Students listen to the summary and ask any final questions.

Learning Point: Lesson concept consolidation

Continuous Assessment/Further Study

Type: Homework

Instruction: Research and write a short paragraph on each of the following:

1. Explain why password management is a critical security role for a Database Administrator.
2. Find one real-world example of a data breach that occurred due to a lack of proper encryption and briefly describe it.
3. Identify another method a DBA uses to secure a database, apart from encryption and password management.

Lesson Keywords

• Database Administrator (DBA) – A person responsible for the maintenance, security, and operation of a database system.
• Security – Measures taken to protect a database from unauthorised access, use, disclosure, disruption, modification, or destruction.
• Encryption – The process of converting information into a code to prevent unauthorised access.
• Decryption – The process of converting encrypted data back into its original, readable form.
• Symmetric-key encryption – An encryption method that uses a single, shared secret key for both encryption and decryption.
• Public-key encryption – An encryption method that uses a pair of keys (a public key and a private key) for encryption and decryption.
• Password management – The practice of creating, storing, and using strong passwords securely.
• Access control – The selective restriction of access to a database or its resources.

Differentiation

For weaker learners, the teacher can provide simpler analogies for encryption and decryption, focusing on the core concepts without delving too deep into technical details. They can be given pre-written notes or diagrams. For faster learners, the teacher can challenge them to research more advanced encryption algorithms or discuss the legal implications of data breaches and the role of compliance in database security.

Suggested Lesson Videos

For further understanding, students can search on YouTube for:

• “Database Administrator security roles explained”
• “What is encryption and decryption?”
• “Symmetric vs Asymmetric encryption simple explanation”

Teacher Guide for Using This Lesson Plan

Before the lesson, ensure you have a clear understanding of the differences between symmetric and public-key encryption. Prepare simple, relatable examples to explain these concepts. You may want to have a visual aid or diagram ready to illustrate the two encryption types. Begin by engaging students with questions about data safety to establish the relevance of the topic. Guide them through the roles of a DBA, emphasizing practical aspects like password policies. When explaining encryption, use analogies like a secret code or a locked box. During the explanation of encryption types, clearly differentiate between the single-key and two-key systems. Encourage questions throughout the lesson to check for understanding. Allow sufficient time for students to copy the Board Summary notes after the main teaching points have been covered. For evaluation, ensure questions directly assess the stated objectives. Provide constructive feedback on student responses and address any misconceptions before concluding the lesson.