Ongoing and completed master's projects

The Digital Security Group (SEC) at IFI and security researchers at the ITS department offer master's projects in information and cyber security.

A list of proposed projects is provided below (check also the folder "Additional theses"). Please consider that most 60 ECTS topics can also be done as 30 ECTS (short) thesis.

Please get in touch with the relevant supervisor(s) if you are interested in a specific project. You are also welcome to discuss your own ideas for a master's project with any of the supervisors in SEC or ITS.

Page title Published Student(s) Supervisor(s)
AI-Assisted Spam Filtering (taken for 2025) Sep. 9, 2024
(In)Security Promoted by Low-Code and No-Code Environments Sep. 23, 2024
AI Red Teaming for Security in General Purpose AI Systems Aug. 27, 2025
AI-Assisted Detection of Privacy-Sensitive Content in Images (taken) Sep. 2, 2025
Analyse av implementerte passordpolicyer i Norge Aug. 18, 2022
  • Kristian Bjørgulfsen, MSc (fullført desember 2024)
Analysis of cyber attacks on gas installations Sep. 26, 2025
  • Torjus Aamodt-Moe
Analysis of Publicly Reported Phishing Sites: Common Features and Trends Sep. 11, 2025
Assessing the Reliability of PenTestGPT: A Comparative Case Study Between LLMs in AI-Driven Infrastructure Testing (taken for 2025) Sep. 9, 2024
Assessing the Reliability of PenTestGPT: A Comparative Case Study Between LLMs in AI-Driven Web Application Testing (taken for 2025) Sep. 9, 2024
Attack analysis of the IEC 61850 Manufacturing Messaging Specification (MMS) Sep. 20, 2024
  • Kristian Fredrik Skibrek
Attack analysis of the Open Automated Demand Response protocol Sep. 20, 2024
  • Synnøve Birkeland
Authenticating HTTPS Servers through the use of DNS with an Offline Personal Authentication Device (OffPAD) Aug. 28, 2020
  • Joakim Hovlandsvåg, MSc (fullført i 2013)
Automated Privacy Risk Assessment Using Large Language Models: A Comparative Study Sep. 9, 2024
Avvikende aktivitetsprofil på Windows-maskiner Sep. 7, 2022
  • Mohammad Anas Rihan, MSc (fullført juni 2024)
Bruk av AI i OSINT Oct. 8, 2023
  • Mathilde Tedesco Siem, MSc (fullført juni 2025)
Cognitive Entity Authentication with Petname Systems Aug. 28, 2020
  • Kent Are Varmedal, MSc (fullført i 2013)
Context Engineering for Security-Focused AI Agents Sep. 22, 2025
Covert channel detection for red teaming tools Sep. 15, 2025
  • Inga Natalia Uchwal
Cybersecurity in Complex IT Environments Sep. 16, 2024
  • Vu Quang Nguyen
Cybersikkerhet for småkraft Oct. 7, 2023
  • Morten Gundersen
Cybersikkerhet i elbilladere Oct. 7, 2023
Cybersikkerhet i fornybar energiproduksjon Oct. 7, 2023
  • Usman Armad
Cybersikkerhet i infrastruktur for elbillading Aug. 27, 2022
  • Ali Reza, MSc (fullført juni 2025)
Cybersikkerhet i vindkraftproduksjon Aug. 27, 2022
  • Toril Sachse, MSc (fullført juni 2024)
Deep Fake Detection and Origin Verification for Digital Media Aug. 26, 2025
Detecting Deepfake Audio for Voice Authentication Security (taken) Sep. 2, 2025
Detection of cyber attacks in drilling simulation environments Sep. 26, 2025
  • Malin Bjuvsjö
Detektering og eliminering av bakdørerer i maskinlæringsmodeller Sep. 17, 2025
  • Bendik Mendes Dahl
Digital Seals on Travel Visas Nov. 6, 2018
Eksperimentering med rammeverk for situasjonsforståelse for forsvar mot cyberangrep Sep. 13, 2025
  • Hanne Hugem
Evaluating Authentication Inconsistencies for Specific Authentication Methods Aug. 20, 2025
Evaluating the Security of LLM-Based Code Generation Across Programming Languages (taken) Sep. 1, 2025
Evaluating the Security, Usability, and Complexity of AI-Assisted Frameworks for Generating Web Applications (taken for 2025) Sep. 9, 2024
Evaluering av agentiske sikkerhetsmekanismer basert på separasjon og flytkontroll Sep. 9, 2026
  • Ivan Othman
Gode forklaringer av alarmer i et sikkerhetsoperasjonssenter Sep. 17, 2025
  • Nezar Mahairi
Hacking AI-Powered Chatbots with Social Engineering (taken) Sep. 2, 2025
Hvor sikre er smarte dørlåser? Aug. 27, 2022
  • Rakel Rønning Ramsdal, MSc (fullført juni 2024)
Identity Management for AI Agents Sep. 18, 2026
IP multicast attacks Sep. 15, 2025
Jailbreaking Large Language Models for System-Level Exploitation (taken) Sep. 2, 2025
Konsekvenser av KI-forsterkede cyberangrep Sep. 22, 2024
  • Stian André Hauge-Larsen
Kvalitetsvurdering av setninger som passord Sep. 30, 2022
Layer 2 network attacks Sep. 15, 2025
  • Mohammad Walid Ahmed
Leveraging Open Source Intelligence (OSINT) for Competitive Advantage and Risk Management in the Corporate Sector Sep. 9, 2024
  • Karishma Sharma, MSc (fullført juni 2025)
Live off the land Aug. 18, 2022
  • Even Christoffer Andersen Ernst, MSc (fullført juni 2024)
LLM assisted Open Source Intelligence Sep. 15, 2025
  • Amalie Håland Aas
LLM-Driven Query Generation for Enhanced Threat Investigation Sep. 13, 2025
  • Jostein Merkesvik
Læring av cybersikkerhet i yrkesfag Nov. 14, 2023
  • Arman Yedicam, MSc (fullført juni 2025)
Manifestering av ledelsesforankring for informasjonssikkerhet Nov. 8, 2022
  • Thea Hatlem, MSc (fullført juni 2024)
NIS2 Regulation and Risk Assessment Sep. 16, 2024
  • Ove Malmstrøm
Offensive analysis of cyber attacks in drilling simulation environments Sep. 26, 2025
  • Malin Bjuvsjö
OSINT analysis of critical infrastructures in Norway Sep. 26, 2025
  • Johannes Matias Bjølverud Aas
Overhead study of blockchain platforms Sep. 25, 2017
  • Salman Ahmed, MSc (fullført 02.10.2019)
Overvåking og deteksjon i agentsystemer Sep. 20, 2026
  • Preben Aleksander Hindley
Passkey analysis Sep. 18, 2024
  • Stephan Skogheim Kyeremeh
QR Code Vulnerabilities Aug. 20, 2025
Requirements and Analysis of Extended HTTP Digest Access Authentication Aug. 28, 2020
  • Henning Klevjer, MSc (fullført i 2013)
Risk Management of Digital Twins in the Oil and Gas Sector Sep. 24, 2021
  • Øyvor Vejlgaard Sørensen, MSc (fullført juni 2023)
Securing HTTP Beyond HTTPS Sep. 23, 2024
Securing the Final Frontier: Satellite Cybersecurity and the Protection of Space-based Assets Sep. 9, 2024
  • Martin Tørris Kjone,
  • Daniel Winther
Security and Complexity Evaluation of AI-Generated Websites: A Case Study on DeepSite Sep. 17, 2025
Sikkerhet i innovasjonsprosesser Sep. 24, 2021
Sikkerhetsanalyse av adgangskontrollsystem Nov. 17, 2025
  • Birk Bergerud-Nygård
Sikkerhetsanalyse av ADS-B Sep. 12, 2024
  • Lars Nøvik
Sikkerhetsanalyse av biometriske løsninger Sep. 18, 2024
  • Pernille Taraldsen Vannebo, MSc (fullført juni 2026)
Sikkerhetskompetanse hos ledere June 20, 2025
  • Mahamed Abdi Ibrahim
Sikkerhetsopplæring i barne- og ungdomsskolen Aug. 11, 2020
  • Einar Ngo, MSc,
  • Hamza Amir Aftab, MSc
Sikkerhetsopplæring i VGS Nov. 23, 2020
  • Marie Wilhelmsen, MSc (fullført 2022)
Skadevare rettet mot gamere Sep. 19, 2025
Software Security in Quantum Software Engineering Nov. 10, 2025
The UiO SecurityLab Robot Sep. 26, 2019
Trusselmodellering av cybertrusler mot kraftbransjen Sep. 24, 2021
User Awareness & Detection of Simulated Phishing via Passive Techniques Sep. 11, 2025
Utvikling og vurdering av autonomt agentisk angrep og forsvar testsystem Sep. 20, 2026
  • Mathias Leo Holien,
  • Adam Templar Karsten Soltvedt
Valg av risikostyringsrammeverk Sep. 18, 2024
  • Vu Quang Nguyen
Vurdering av cybersikkerhet i smarte hjem Oct. 7, 2023
  • Fadl El Naasami Skal, MSc (fullført januar 2026)
Vurdering av offensive og defensive cyberkapasiteter Aug. 4, 2022
  • Bjørnar Sollesnes Kummeneje, MSc (fullført desember 2024)
Vurdering av sikkerhet for sikkerhetsprodukter Oct. 7, 2023
Web Security: Semantic Gap Sep. 14, 2021
  • Martin van Kervel Smedshammer, MSc (fullført juni 2023)