Project Topics for 4th Year Students  
                                        by Dr. Şerif Bahtiyar 
                       During the projects, you may/will learn some ATTACKING/HACKING techniques! 
                        I DO NOT ACCEPT any LIABILITY in case of any MALICIOUS activity of students! 
          
          1.  Machine Learning and Security Topics 
              •   Attack detection/prediction/defense applications with machine learning 
                                                      o  DOS/DDOS attacks  
                                                      o  XSS attacks  
                                                      o  Targeted attacks  
                                                      o  Attacks on connected vehicles 
                                                      o  Attacks on Unmanned Aerial Vehicle (UAV)  
                                                      o  Phishing 
                                                      o  … 
                                                       
              •   Intrusion detection with machine learning 
                      o   Anomaly detection 
                      o   Mobile platforms (Android, iOS, …) 
                      o   Web platforms 
                      o   Specific applications 
                      o   … 
                           
              •   Fraud detection/prediction applications with machine learning 
                                                           o      Credit card 
                                                           o      E-Commerce 
                                                           o      Digital goods 
                                                           o      Payments systems 
                                                           o      Digital wallets 
                                                           o      …. 
              •   Malware analysis/detection/prediction with machine learning 
                      o   Virus 
                      o   Trojan 
                      o   Spyware 
                      o   Ransomware 
                      o   Rootkit 
                      o   Botnet 
                      o   Worm 
                      o   …. 
                           
              •   Attacks on machine learning and artificial intelligence algorithms 
                                                       o  Manipulate ML and AI algorithms 
                                                       o  Force increasing wrong decisions 
                                                       o  Reduce performance (DOS attack) 
                                                       o  …. 
                                                        
                                    
                                        İTÜ Cyber Security and Privacy Research Lab (SPF Lab) 
   
          2.  Trust, Privacy, and Identity Management 
              •   Trust assessment of 
                      o  Software an entity 
                      o  Software a service  
                      o  For/in social network 
                      o  For/in web 
                      o  E-commerce 
                      o  Government services 
                      o  … 
              •   Trust computations for autonomous systems  
                                                 o        Software/system 
                                                 o        Agents 
                                                 o        Cars 
                                                 o        Transportations 
                                                 o        … 
                                                  
              •   Recommendation and/or reputations system(s) for any service based on  
                      o   Security 
                      o   Privacy 
                      o   Usability 
                      o   System 
                      o   … 
                           
              •   Privacy compliance checker for  
                                                        o  Web 
                                                        o  Smart phone 
                                                        o  Laptop 
                                                        o  Computer 
                                                        o  Database 
                                                        o  E-Health 
                                                        o  … 
                                                         
              •   Identity Management 
                      o   Virtual Identity 
                      o   Security 
                      o   Trust 
                      o   Risk 
                      o   Verification 
                                    
                                        İTÜ Cyber Security and Privacy Research Lab (SPF Lab) 
   
   
          3.  Financial Systems and Electronic Payments 
              •   Payment Applications on IoT Devices 
              •   Blockchain Applications 
              •   Soft HSM for financial systems 
              •   Token generator for financial systems 
              •   Mobile payment application with multilevel security options 
                                                                        • Digital  wallets  for  IoT  devices,  for  blockchain 
                                                                        (Ethereum/Bitcoin/Ripple/…) 
                                                                        • Monitoring  services  for  financial  services  by 
                                                                        using blockchain 
                                                                        • Connected payment service for vehicles 
                                                                        • Others 
   
   
   
   
          4.  Attack, Defense, and Others 
              •   DDoS attack tools  
              •   XSS attack tool for vulnerability detection 
              •   Automated prediction of targeted attacks 
              •   Attacks on connected services of cars/ on communication of drones 
              •   Spyware detection on web services (web page) 
              •   Developing malware for experimental purposes 
              •   Private services (Payment/Voting/Gaming/E-Commerce/Health/…) on blockchain  
              •   Risk assessment of networks (may be any network such as social network) based on network traffic 
              •   Security risk assessment of mobile devices (smart phone, laptop, smart watch, …) 
              •   Security analysis of İTÜ students’ smart phones via network connections 
              •   Biometric (fingerprint/face/iris/…)/ Location based authentication for (depends on context) 
              •   Attribute based access control for (financial systems/transportation systems) 
              •   Micro intrusion detection system (M-IDS) for (finance applications/e-health/transportation/…) 
              •   Connected payment service for vehicles 
          5.  New topics…. 
   
                                        İTÜ Cyber Security and Privacy Research Lab (SPF Lab)