Thesis

Thesis info for Cyber Security students

NB! This section will be updated during February 2014!

Deadlines for 2014 spring

• March 1 - send an e-mail to Rain Ottis stating your intent to defend your thesis in June, your topic and the name and contact information of your supervisor.
• March-May - pre-defence of selected students
• TBD (mid May) - deadline for application of defending the thesis in OIS
• TBD (late May) - submission of the thesis (two hard copies to ICT-411)
• TBD (early June) - defenses of the thesis (presentation 15 minutes + discussion)
• After the thesis defense, please visit the Dean's Office for more information about final formalities
• TBD (June) - final ceremony
• Upload your thesis if you would like to have it public

Topic and advisor

Every student must have an advisor when writing the thesis. The advisor's role is to provide guidance on topic selection and research methods, as well as to give feedback on your work. It is not the advisor's duty to correct spelling mistakes or formatting errors - they will point such things out, but the responsibility remains with the student. Before a thesis will be accepted for defence, the advisor has to agree that it is of sufficient quality.

Almost any professor and lecturer you have met in your curriculum can act as an advisor of your thesis. Some of them have some open problems suitable for doing research and writing a thesis, but many may not have a topic to offer right away. It is usually more helpful to have an initial idea of a topic of your thesis and ask someone with interests in the related field to advise you. You can have an advisor not related to the university, but he can act only as a co-advisor and you need to agree to somebody related to the curricula or the leading institute of the curriculum to be an official co-advisor.

When refining a topic idea, make sure it has a clear connection with cyber security.

Proposed topics

The topics or keywords below are offered by potential (co-)supervisors. The list is updated as new offers emerge.

From the TUT IT office

Infrastructure

• Migrating TUT Campus LAN to IPv6; Edgars Zigurs
• Implementing a freeware SIEM solution in TUT; Edgars Zigurs
• Campus WiFi quality and signal strength modeling (3D); Edgars Zigurs

Development

• electronic door signs, room calendars, etc.; Thomas Lepik
• VoIP solutions - softphone, integration with existing information systems; Thomas Lepik
• integrating last generation BMS (Building Management System); Thomas Lepik
• the student view of OIS (usability, security, re-design); Enn Rebane

From Arnis Paršovs, University of Tartu, arnis@ut.ee

• Topic: On-the-fly encryption for car DVR

Task: Implement on-the-fly encryption functionality for Prestigio car DVR (by patching publicly available firmware - possibly by hooking write calls). Use of hybrid encryption is recommended, however, implementation of scrambling (e.g., XORing with a fixed key) might already be considered success. Describe the threat model, how it was done and how to use it.

• Topic: Parallel tallying for Estonian i-voting

Task: Describe security risks that could be reduced if election observers would be allowed to perform vote verification and counting using their computers. Propose changes to the i-voting procedures and develop parallel tallying reference implementation and test data set. Analyse new risks introduced and propose counter measures.

• Topic: Perfect Secrecy for TLS

Task: Create an Internet Draft proposing a TLS cipher suite or extension that would ensure perfect secrecy using one-time pad. Develop a proof-of-concept patch for OpenSSL/mod_ssl and Firefox. Analyze the security and usability, describe the use cases.

• Topic: TLS Session Resumption and ID card Authentication

Task: Study how TLS session resumption is implemented in browsers. Measure and compare the performance improvement TLS session resumption provides. Measure the performance impact if the TLS client certificate authentication is performed using a smart card.

TREsPASS project

• Research project: Technology-supported Risk Estimation by Predictive Assessment of Socio-technical Security

The project is also suitable for PhD research, following the completion of the Master's studies. Contacts: Dr Peeter Laud, Dr Jan Willemson

Formal Requirements and recommendations

There are no strict rules on formatting your thesis. Some general advice that is good to follow for a master thesis:

• a title page, an author declaration, an annotation in English and Estonian, a list of contents, and references are required in the thesis
• around 50 pages + appendixes if needed
• Times New Roman (or similar), font size 12, 1.5 spacing used for the ordinary text
• headings are numbered and no more than 3 levels used
• 2 copies are submitted, you will get one back afterwards.

The Cyber Defence Seminar is designed to provide advice on the thesis requirements and writing process to Cyber Security Master's students.

Useful links

Some advice and requirements for writing a thesis in UT

Some advice and requirements for writing a thesis in TUT (in Estonian)

Databases, books, research papers accessible from the TTU network