Master's Theses in Informatics: Information Security

The Digital Security Group (SEC) at IFI and security researchers at the ITS department offer master's projects in information and cyber security.

A list of proposed projects is provided below (check also the folder "Additional theses"). Please consider that most 60 ECTS topics can also be done as 30 ECTS (short) thesis.

Please get in touch with the relevant supervisor(s) if you are interested in a specific project. You are also welcome to discuss your own ideas for a master's project with any of the supervisors in SEC or ITS.

Page title Published Supervisor(s)
Effectiveness of WAFs for Securing Web Applications against AI assisted Attacks Sep. 30, 2026
Nytten av NIS2 for virksomheter Sep. 27, 2026
Effects of the United Nations Convention against Cybercrime Sep. 27, 2026
Are Backdoors Leaving Traces? Analysis of Behavioral Shifts in LLMs Sep. 23, 2026
Approved Without Inspection - Repository Poisoning Against AI Code Review Sep. 23, 2026
Anything You See Can and Will Be Used Against You Sep. 23, 2026
Adversarial Attacks on Models - Bring Your Own Ideas for Red-Teaming LLMs Sep. 23, 2026
Adversarial Attacks on Agents - Bring Your Own Ideas for Red-Teaming AI Agents Sep. 23, 2026
A Poem, a Story, a Jailbreak: Explaining Creative Attacks on LLMs Sep. 23, 2026
A Payload in Plain Sight - Stegomalware in LLMs and AI Workflows Sep. 23, 2026
Selected Topics in Offensive Security Sep. 21, 2026
Automated Generation of Precise Reasoning Rules for Cybersecurity Knowledge Using LLMs Sep. 21, 2026
Automating Cybersecurity Knowledge Representation with LLM-Driven Ontology Construction Sep. 21, 2026
Cybersikkerhet i kritisk infrastruktur Sep. 21, 2026
Analysing Passkey and Legacy Authentication Interrelation Sep. 21, 2026
Metacognitive Routing of Structured Analytic Techniques for LLM Agents Sep. 21, 2026
Bias-Aware LLM Agents for Cyber Threat Intelligence Using Structured Analytic Techniques Sep. 21, 2026
Beyond Rationalization - Evaluating the Effects of Structured Reasoning on LLM Decision-Making Sep. 21, 2026
Drone LIDAR streaming for Public Safety Sep. 21, 2026
Open-source engineering and communities Sep. 21, 2026
Confidential computing beyond the machine: people, law and oversight Sep. 21, 2026
Confidential computing: engineering verifiable trust Sep. 21, 2026
Implementing a Passkey Revocation Service Sep. 21, 2026
What Can Go Wrong With AI-Based Browser Extensions? Sep. 18, 2026
Mobile App Security and Privacy Analysis Sep. 18, 2026
Mobile Browser Extensions Sep. 18, 2026
Evaluering av tabulære grunnmodeller for dataeffektiv og pålitelig inntrengningsdeteksjon Sep. 9, 2026
Can We Trust AI-Generated Security Fixes? Assessing Agentic AI Outputs in DevSecOps Sep. 7, 2026
Ledelse av informasjonssikkerhet i samarbeid med Gritera Security Aug. 19, 2026
Kritikalitetsvurdering av digitale systemer i helsetjenesten Aug. 19, 2026
Sustainability attacks on blockchain platforms Apr. 6, 2026
Energy consumption of blockchain-based systems Apr. 6, 2026
A Data-Centric Approach to Context-Aware Email Scenario Generation via Adversarially Guided Synthetic Data Curation Apr. 5, 2026
Cause-and-Effect of Adversarial Techniques in Operational Technology (OT) Nov. 10, 2025
Prompt Hunt – A Threat Hunting Framework for adversarial intent in LLM prompts Nov. 3, 2025
Semantic-Incremental Rough-Set Framework for Adaptive and Explainable Cyber Threat Intelligence Oct. 21, 2025
Opplevd sikkerhet og reell sikkerhet i skyteknologi Sep. 26, 2025
Risikostyring i skyteknologi – har anbefalte risikoreduserende tiltak effect Sep. 26, 2025
Generating Red-Team Adversarial Emulations: From Reports to CACAO Attack Playbooks and Executable Caldera Emulations Using Large Language Models Sep. 25, 2025
Potentials and challenges for EU cybersecurity cooperation Sep. 25, 2025
Impacts of the EU cyber acts Sep. 25, 2025
Digital Forensics Sep. 12, 2025
Blockchain Lab: attacks on digital credentials and ID wallets Aug. 28, 2025
Blockchain Lab: Visualizing poisoning attacks on federated learning Aug. 28, 2025
Blockchain Lab: Simulating attacks on blockchain Aug. 28, 2025
Informasjonssikkerhet i omorganiseringsprosesser June 20, 2025
A Nationwide Vulnerability Assessment and Reporting Platform Nov. 28, 2024
Store språkmodeller for deteksjon, analyse og respons av digitale trusler Sep. 22, 2024
Reversering av obfuskert skadevare Sep. 20, 2024
Maskinlæring for CTF Sep. 20, 2024
Maskinlæring for dekompilering Sep. 20, 2024
Hvordan forhindre at informasjonssikkerhet og personvern blir et hinder for pasientsikkerhet? Sep. 18, 2024