Information Security Research Group

Topics for Master/Bachelor Thesis

We are looking for motivated students who would be interested in exploring and preparing their thesis on the areas of information system security.

Contact the potential supervisor to learn more.

Topics proposed by Olumba Chima Anya (olumbach<at>ut<dot>ee)

• Validating LLM-generated proof-of-vulnerability exploits*
• Timing interference between deception services and real-time protection agents*

Topics proposed by Lukas Daubner (lukas.daubner<at>ut<dot>ee)

• AI Harness for Implementing Forensic Readiness*
• Security Risk-Aware BPMN Modelling: Extension of the FREAS Tool
• Designing Narrative Hacking Exercise
• Designing a Complex Digital Forensics Scenario
• Implementation Guideline for Forensic Readiness Quality

Topics proposed by Ijeoma Faustina Ekeh (ijeomafa<at>ut<dot>ee)

• Towards a Standardised Definition of Trustworthiness for Artificial Intelligence Systems: A Cross-Disciplinary Analysis*
• From Manual to Automated: A Prototype Tool for EU AI Act Trustworthiness Assessment of AI Systems*
• Documented vs. Implemented: A Gap Analysis of Security and Robustness Controls in AI Systems under the EU AI Act*

Topics proposed by Vjatšeslav Antipenko (vjatseslav.antipenko<at>ut<dot>ee)

• Comparative Analysis of Open-Weight Large Language Models for Operational Risk Assessment*
• Building a Function-Based Knowledge Graph (GraphRAG) for Automated Threat Elicitation*
• Fixing Guesswork and Repetitive Findings in AI Security Interviews*
• Designing a Benchmark to Compare AI vs. Human Cybersecurity Audits*

Topics proposed by Mari Seeba (mari.seeba<at>ut<dot>ee)

• Riskihalduse sõnavara ontoloogia Eesti seadusandluses*
• Conceptual model for Cybersecurity legislation*

Topics proposed by Mubashar Iqbal (mubashar.iqbal<at>ut<dot>ee)

• Adaptive Least-Privilege Access Control for Autonomous Agents*
• Cyber Deception Against AI-Driven Attack Agents*
• Detecting AI-Generated Spear-Phishing Through Campaign-Level Signals*
• A Taxonomy of Modelling Techniques for Digital Twin Systems
• Model-driven engineering of digital twins
• Zero-knowledge Proofs for Secure Digital Twin Interactions in Industry 4.0

Topics proposed by Raimundas Matulevičius (rma<at>ut<dot>ee)

• What is "Cyber Security"?*
• Security risk management of the Open Compute Project (OCP) devices*
• Security risk management of the space technology and systems*
• Security risk management of the supply chain systems*
• GDPR compliance process assessment using the DPO tool
• Information access control mechanisms, models, and applications
• Identity management approaches, models and applications
• Security risk management and its impact on information systems forensics
• Artificial intelligence models and applications for information defence and offence