Data encryption in cloud in Cybersecurity - Mini Project: Build & Apply

Data Encryption in Cloud

📖 Scenario: You are working with a cloud storage service that holds sensitive user data. To protect this data, you need to encrypt it before uploading it to the cloud. Encryption transforms readable data into a secret code that only authorized users can decode.In this project, you will simulate the process of encrypting data using a simple method before storing it.

🎯 Goal: Build a simple data encryption setup that converts plain text into an encrypted form using a basic cipher technique. This will help you understand how data encryption works in cloud environments to keep information safe.

📋 What You'll Learn

Create a dictionary called data_to_encrypt with three exact entries: 'username': 'cloudUser', 'password': 'safePass123', and 'email': '[e-mail]'.

Create a variable called encryption_key and set it to the integer 3.

Write a function called encrypt_text that takes a string and shifts each letter forward by the encryption_key positions in the alphabet (Caesar cipher). Non-letter characters should remain unchanged.

Create a new dictionary called encrypted_data that contains the encrypted versions of the values from data_to_encrypt using the encrypt_text function.

💡 Why This Matters

🌍 Real World

Encrypting data before uploading to cloud storage protects sensitive information from unauthorized access.

💼 Career

Understanding basic encryption techniques is essential for cybersecurity roles and cloud data protection.

1

Create the data dictionary

Create a dictionary called data_to_encrypt with these exact entries: 'username': 'cloudUser', 'password': 'safePass123', and 'email': '[e-mail]'.

Cybersecurity

# Create the dictionary data_to_encrypt with the specified entries
# Your code here

Hint

Use curly braces {} to create a dictionary with keys and values separated by colons.

2

Set the encryption key

Create a variable called encryption_key and set it to the integer 3.

Cybersecurity

data_to_encrypt = {
    'username': 'cloudUser',
    'password': 'safePass123',
    'email': '[e-mail]'
}
# Create the variable encryption_key and set it to 3
# Your code here

Hint

Simply assign the number 3 to the variable encryption_key.

3

Write the encryption function

Write a function called encrypt_text that takes a string parameter called text and returns a new string where each letter is shifted forward by encryption_key positions in the alphabet (Caesar cipher). Letters should wrap around from 'z' to 'a'. Non-letter characters should remain unchanged.

Cybersecurity

def encrypt_text(text):
    result = ''
    for char in text:
        if char.isalpha():
            base = ord('A') if char.isupper() else ord('a')
            shifted = (ord(char) - base + encryption_key) % 26 + base
            result += chr(shifted)
        else:
            result += char
    return result
# Create encrypted_data dictionary below

Hint

Use the ord() and chr() functions to shift letters. Check if a character is a letter with isalpha(). Keep other characters as they are.

4

Encrypt the data dictionary

Create a new dictionary called encrypted_data that contains the same keys as data_to_encrypt but with values encrypted by calling encrypt_text on each original value.

Cybersecurity

encrypted_data = {
key: encrypt_text(value) for key, value in data_to_encrypt.items()

Hint

Use a dictionary comprehension to apply encrypt_text to each value in data_to_encrypt.

Practice

1. What is the main purpose of data encryption in the cloud?

easy

A. To protect data by converting it into a secret code

B. To speed up data transfer between servers

C. To delete data after use automatically

D. To make data publicly accessible

Solution

1. Step 1: Understand what encryption does

   Encryption changes readable data into a secret code that only authorized users can read.

2. Step 2: Identify the purpose in cloud context

   In the cloud, encryption protects data from unauthorized access during storage or transmission.

3. Final Answer:

   To protect data by converting it into a secret code -> Option A

4. Quick Check:

   Encryption = Data protection [OK]

Hint: Encryption means turning data into secret code [OK]

Common Mistakes:

• Confusing encryption with data deletion
• Thinking encryption speeds up data transfer
• Believing encryption makes data public

2. Which of the following is the correct term for the secret used to encrypt and decrypt data in the cloud?

easy

A. Firewall

B. IP address

C. Encryption key

D. Cloud storage

Solution

1. Step 1: Identify the secret used in encryption

   The secret used to lock and unlock encrypted data is called an encryption key.

2. Step 2: Eliminate unrelated terms

   Firewall protects networks, IP address identifies devices, and cloud storage holds data but none are the secret key.

3. Final Answer:

   Encryption key -> Option C

4. Quick Check:

   Secret for encryption = Encryption key [OK]

Hint: Secret code uses an encryption key [OK]

Common Mistakes:

• Confusing firewall with encryption key
• Mixing IP address with encryption secret
• Thinking cloud storage is the secret

3. Consider this simple example: A cloud service encrypts data using a key and sends it. Which step correctly describes what happens next?

medium

A. The data is sent as plain text without encryption

B. The data is decrypted using the same key before use

C. The data is deleted immediately after sending

D. The data is copied to all users without protection

Solution

1. Step 1: Understand encryption and decryption process

   Data encrypted with a key must be decrypted with the same or matching key to be readable again.

2. Step 2: Analyze the options

   Only The data is decrypted using the same key before use correctly describes decrypting data before use; others describe unsafe or incorrect actions.

3. Final Answer:

   The data is decrypted using the same key before use -> Option B

4. Quick Check:

   Encrypted data needs decryption [OK]

Hint: Encrypted data must be decrypted with the key [OK]

Common Mistakes:

• Assuming data is sent without encryption
• Thinking data is deleted after sending
• Believing data is shared without protection

4. A cloud user tries to decrypt data but gets an error. What is the most likely cause?

medium

A. The data is too large to decrypt

B. Data was never encrypted

C. The cloud server is offline

D. Using the wrong encryption key

Solution

1. Step 1: Identify common decryption errors

   Decryption errors often happen when the wrong key is used because the data cannot be unlocked properly.

2. Step 2: Evaluate other options

   Data must be encrypted to decrypt; server offline or data size usually don't cause key errors.

3. Final Answer:

   Using the wrong encryption key -> Option D

4. Quick Check:

   Wrong key causes decryption error [OK]

Hint: Wrong key causes decryption failure [OK]

Common Mistakes:

• Blaming server status for key errors
• Assuming data size causes decryption error
• Ignoring importance of correct key

5. A company wants to ensure that data stored in the cloud is safe even if the cloud provider is hacked. Which encryption method should they use?

hard

A. Client-side encryption where data is encrypted before upload

B. Relying on the cloud provider's password protection only

C. Encrypting data only after it is stored in the cloud

D. Sharing encryption keys publicly for easy access

Solution

1. Step 1: Understand encryption responsibility

   Client-side encryption means data is encrypted before it leaves the company, so cloud providers cannot read it.

2. Step 2: Compare other options

   Relying on provider passwords or encrypting after upload risks exposure if provider is hacked; sharing keys publicly is unsafe.

3. Final Answer:

   Client-side encryption where data is encrypted before upload -> Option A

4. Quick Check:

   Encrypt before upload = Best cloud data safety [OK]

Hint: Encrypt data before upload for best security [OK]

Common Mistakes:

• Trusting only cloud provider passwords
• Encrypting data after upload risks exposure
• Sharing keys publicly weakens security