2

I am currently studying an IT-security masters course and want to choose an interesting diploma thesis topic.

A possible supervisor of my thesis suggested pentesting self-encrypting USB/HDD/etc., however he did not suggest a specific form. Some of his suggestions were :

  • Pentesting an older, vulnerable device
  • Finding and (if successful in obtaining one) pentesting an intentionally vulnerable device
  • Pentesting a self-made device, intentionally vulnerable device
  • A summary of currently available solutions/intentionally vulnerable devices (but without a practical part)

I wasn't particularly interested in the last two, because I have no experience in creating HW (not even with some Arduino or things like that) and because I would like to have some hands-on experience while writing my diploma thesis.

And since I have no prior experience in the area of HW pentesting, could you please tell me, which oneof those topics could be the best for a diploma thesis and why should I pick it - based on your experience ?

Thank you very much

closed as off-topic by Rory Alsop Mar 24 '18 at 16:56

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Buy one (I am not recommending the manufacturer or saying their devices are susceptible) hook up a jtag device and get the key once it has been derived. – jas- Mar 24 '18 at 11:19
  • 1
    Welcome. This question is pretty open-ended. "Suggest more interesting topics" does not fit the StackExchange Q&A format. "Pros and cons of the topics" is also open-ended (difficult to have a single acceptable answer). If you can narrow your question, we can have a better go at it. – schroeder Mar 24 '18 at 12:10
  • Sorry, but now the question is purely opinion-based and still not a good fit. Please take a look at the FAQ. – schroeder Mar 24 '18 at 12:13
  • @schroeder I have edited the last paragraph, hope it narrowed it down. – Jesse_Pinkman Mar 24 '18 at 12:13
  • 1
    You can have a look at Academia, your question will probably still be off-topic there in its current form, but you could gather some info on approaches to choosing thesis topics. – Tom K. Mar 24 '18 at 13:40