Man-in-the-middle attacks in Cybersecurity - Mini Project: Build & Apply

Understanding Man-in-the-Middle Attacks

📖 Scenario: You are learning about cybersecurity threats. One common threat is the Man-in-the-Middle (MitM) attack, where an attacker secretly intercepts and possibly alters communication between two parties who believe they are directly communicating with each other.In this project, you will simulate a simple communication between two users and then add a step to represent a Man-in-the-Middle attack intercepting the message.

🎯 Goal: Build a simple Python simulation that shows how a message is sent from one user to another, and then how a Man-in-the-Middle attacker can intercept and modify the message before it reaches the receiver.

📋 What You'll Learn

Create a dictionary representing users and their messages

Add a variable to represent the attacker’s interception status

Write code to simulate sending a message from sender to receiver

Add code to simulate the attacker intercepting and modifying the message

💡 Why This Matters

🌍 Real World

Understanding how attackers intercept and modify messages helps in designing secure communication systems.

💼 Career

Cybersecurity professionals must recognize and prevent Man-in-the-Middle attacks to protect data privacy and integrity.

1

Create the initial users and messages

Create a dictionary called messages with these exact entries: 'Alice': 'Hello Bob' and 'Bob': '' representing Alice's message to Bob and Bob's empty message.

Cybersecurity

# Create the messages dictionary with Alice's message and Bob's empty message
# Your code here

Need a hint?

Use a dictionary with keys 'Alice' and 'Bob'. Assign 'Hello Bob' to Alice and an empty string to Bob.

2

Add attacker interception status

Add a boolean variable called attacker_active and set it to true to represent that the attacker is intercepting messages.

Cybersecurity

messages = {'Alice': 'Hello Bob', 'Bob': ''}
# Add attacker_active variable set to true
# Your code here

Need a hint?

Use a simple boolean variable named attacker_active and set it to true.

3

Simulate sending the message

Write code to copy the message from messages['Alice'] to messages['Bob'] only if attacker_active is false. Use an if statement to check attacker_active.

Cybersecurity

messages = {'Alice': 'Hello Bob', 'Bob': ''}
attacker_active = true
# Copy Alice's message to Bob only if attacker_active is false
# Your code here

Need a hint?

Use if not attacker_active: and inside it assign messages['Bob'] = messages['Alice'].

4

Simulate attacker intercepting and modifying the message

Add an else block to the if statement that sets messages['Bob'] to 'Hello Bob, this is Eve' to simulate the attacker changing the message.

Cybersecurity

messages = {'Alice': 'Hello Bob', 'Bob': ''}
attacker_active = true
if not attacker_active:
    messages['Bob'] = messages['Alice']
else:
    # Modify the message to simulate attacker
    # Your code here

Need a hint?

Use an else: block and inside assign messages['Bob'] = 'Hello Bob, this is Eve'.