Top 10 Cybersecurity Project Ideas
1. Zero-Knowledge Password Vault with Argon2id
A client-side encrypted password manager where master keys never leave the browser. Uses Argon2id key stretching and per-record AES-256-GCM encryption. Viva focus: explain zero-knowledge architecture and memory-hard hashing trade-offs.2. Malware Detection in Windows PE Executables using Machine Learning
Classify PE binaries into benign and malicious without code execution by parsing PE header sections, imported DLL functions, and byte entropy using LightGBM or Scikit-learn. Viva focus: evasion techniques, feature selection, and false positive mitigation.3. Automated Web Vulnerability & SQL Injection Scanner
An AST-based security auditing tool that fuzzes web applications for SQL injection, reflected XSS, and broken access controls. Viva focus: AST tokenization versus regex-based signature detection.4. End-to-End Encrypted File Sharing Platform
A secure cloud storage portal utilizing hybrid RSA-4096 and AES-256-GCM encryption for zero-knowledge file distribution. Viva focus: key exchange protocols and digital envelope mechanics.5. Android Malware Detection via APK Permission Analysis
Extract AndroidManifest.xml permissions and Dalvik bytecode opcodes to detect malicious APK behavior using Random Forest classification. Viva focus: intent filters, dynamic reflection, and permission bundling vulnerabilities.6. Early Ransomware Detection via Filesystem Entropy Monitoring
Detect active cryptographic ransomware by monitoring filesystem modification velocity, Shannon entropy spikes in user documents, and canary directory traps. Viva focus: heuristic behavior analysis vs traditional signature matching.7. Standards-Compliant TOTP Two-Factor Authentication Engine
Implement a two-factor authentication server following RFC 6238 specifications with HMAC-SHA1 and QR code provisioning. Viva focus: clock drift mitigation and replay prevention.8. SSH & Web Honeypot Attack Analytics with Dashboard
Deploy a low-interaction Cowrie honeypot to trap brute-force attacks, record attacker terminal sessions, and visualize threat origins using an analytics dashboard. Viva focus: attacker profiling and threat intelligence gathering.9. SDN-Based Real-Time DDoS Detection and Mitigation
Leverage OpenFlow controller telemetry and entropy thresholds to detect volumetric SYN and UDP floods in software-defined networks, dynamically pushing drop rules. Viva focus: SDN separation of control plane and data plane.10. AI-Powered Email Phishing Detector with URL Sandboxing
Combine NLP header inspection with a headless browser URL sandbox to detect spear-phishing campaigns and credential harvesting landing pages.
Preparing for Cybersecurity Viva Questions
Tagged in