I am currently studying an IT-security masters course and want to choose an interesting diploma thesis topic.

A possible supervisor of my thesis suggested pentesting self-encrypting USB/HDD/etc., however he did not suggest a specific form. Some of his suggestions were :

  • Pentesting an older, vulnerable device
  • Finding and (if successful in obtaining one) pentesting an intentionally vulnerable device
  • Pentesting a self-made device, intentionally vulnerable device
  • A summary of currently available solutions/intentionally vulnerable devices (but without a practical part)

I wasn't particularly interested in the last two, because I have no experience in creating HW (not even with some Arduino or things like that) and because I would like to have some hands-on experience while writing my diploma thesis.

And since I have no prior experience in the area of HW pentesting, could you please tell me, which oneof those topics could be the best for a diploma thesis and why should I pick it - based on your experience ?

Thank you very much

  • 1
    Buy one (I am not recommending the manufacturer or saying their devices are susceptible) hook up a jtag device and get the key once it has been derived. – jas- Mar 24 '18 at 11:19
  • 1
    Welcome. This question is pretty open-ended. "Suggest more interesting topics" does not fit the StackExchange Q&A format. "Pros and cons of the topics" is also open-ended (difficult to have a single acceptable answer). If you can narrow your question, we can have a better go at it. – schroeder Mar 24 '18 at 12:10
  • Sorry, but now the question is purely opinion-based and still not a good fit. Please take a look at the FAQ. – schroeder Mar 24 '18 at 12:13
  • @schroeder I have edited the last paragraph, hope it narrowed it down. – Jesse_Pinkman Mar 24 '18 at 12:13
  • 1
    You can have a look at Academia, your question will probably still be off-topic there in its current form, but you could gather some info on approaches to choosing thesis topics. – Tom K. Mar 24 '18 at 13:40