• simple network IDS

• firewall

• Antivirus for malicious PDFs

• automatic pentester (attacking certain fields in a given HTML page)

• Secure Chatting app (fully encrypted)

• DLP program, think of any application!

• Anti Clickjacker for your browser

• Detector for phishing attacks

More on reddit.com

I'll be the one to say it: please don't post in a subreddit asking the community to figure out your school projects for you.

At most I'll say, search through the various pages of this subreddit to figure something out. Good luck!

More on reddit.com

Some more ideas, hopefully none too advanced. A lot might depend on what tools / resources you have available for this project: Wireshark exercises - Reviewing wireless traffic to detect scan attempts (such as those from nmap or other scanners), identify insecure protocols (such as SSLv2 or OpenSSL), or malicious activity (such as ARP poisoning). Both red team and blue team could benefit from the exercises. If you setup a lab and make something use OpenSSL, you could demonstrate things like Heartbleed & why older insecure protocols need to be disabled. Or blue team tries to detect scans coming from the red team using something like Kali Linux. Physical security and/or Social Engineering - If you have a lab space setup somewhere, blue team could demonstrate the effectiveness of physical access controls. Red team would try to get hands-on access to a machine (either through the lack of physical controls, or social engineering) Phishing and/or Multifactor Effectiveness - You could setup some scenario where red team is able to obtain usernames and passwords to specific users, possibly through a phishing simulation that captures usernames / passwords. Blue team could then demonstrate that even if the threat actor obtains credentials, they couldn't get in without MFA. You could demonstrate how some MFA methods are more effective than others, such as TOTP authentication > SMS, or how MFA with number matching > push notifications. Basics of access control / principle of least privilege - Blue team would setup security groups and permissions to a resource. Red team would try to access things they shouldn't, while blue team should try and demonstrate the effectiveness of using things like security groups to minimize the potential impact of unintentional or intentional insider threat. Access control should be setup so that users have the minimum required permissions necessary to do their function. You could potentially demonstrate the risk of not utilizing the principle of least privilege as well, by putting one person in a super access group & demonstrating how a compromise for a user like that is significantly more impactful. More on reddit.com

Rasberry pinapple

More on reddit.com