Security final year project ideas
Free security final-year project ideas for CS and software engineering students, each scoped for a single semester with a suggested stack and deliverables.
Ideas and guidance, not finished projects
These are project ideas and scoping guidance, published free for students to use as a starting point. I do not build, write, or sell final-year projects, and I do not complete coursework for anyone. Take an idea, make it yours, and build it.
6 ideas
Federated Learning with Differential Privacy
Train a shared model across several simulated clients that never send their raw data, add calibrated noise for a formal privacy guarantee, and measure exactly what that guarantee costs in accuracy. The measured privacy and utility trade off is the result.
End-to-End Encrypted File Sharing with Verifiable Keys
A file sharing service where the server stores only ciphertext and can never read a file, with key verification so users can detect a server substituting keys. Correct key management is the whole difficulty, and the honest write up of what the design does not protect against is half the marks.
Honeypot Network with Attack Telemetry Dashboard
Deploy deliberately exposed decoy services, collect what attacks them, and analyse the traffic to characterise what automated internet-wide scanning actually looks like. Real data from a live internet-facing deployment, which very few student projects have.
Dependency Supply Chain Risk Scanner
A scanner that reads a project's dependency tree and scores it on more than known vulnerabilities: maintenance activity, maintainer concentration, install scripts and recent ownership changes. The interesting risks are the ones no advisory database has recorded yet.
Phishing Detection Browser Extension
A browser extension that warns about likely phishing pages using features computed locally, without sending browsing history anywhere. The privacy constraint is what makes it interesting, because the obvious implementation is a URL lookup service that watches everything you visit.
Static Analyser for Insecure Code Patterns
A static analysis tool that parses source code into an abstract syntax tree and finds a defined set of security flaws, using data flow analysis rather than regular expressions. Building a real taint tracker is a proper computer science project.
Browse project ideas by domain and difficulty
Each of these is its own page, so you can send someone straight to the AI ideas or the beginner ones.
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Every session is free; a few slots open each week.
- 1:1 Mentorship
- Fresh Graduate Mentorship
- Career Guidance
Brand deals, promos and partnerships: tauseeffayyaz@gmail.com
Follow along
New writing, resources and project ideas land here first.