Cybersecurity capstones work best when they're built and demonstrated in a controlled lab setup (your own VM/network) — panels want to see it work, not just read the theory. These topics are scoped for exactly that.
A signature or ML-based detector flagging suspicious traffic patterns in a simulated network.
URL/feature-based classifier distinguishing phishing pages from legitimate ones, with a browser-extension demo.
AES/RSA-based file encryption utility with key management, packaged as a desktop or web tool.
A monitoring tool that flags suspicious keyboard-hook processes — pairs well with a short ethics/responsible-use writeup.
An automated scanner checking for common OWASP issues (SQLi, XSS) against a test app you control.
TOTP-based 2FA added to a sample login flow — a compact, well-scoped crypto-adjacent build.
A sandboxed simulation (never real malware) demonstrating detection heuristics for encryption-like file activity.
Encrypted local vault with master-password-derived key encryption — good for showing key-derivation-function knowledge.
Combines cybersecurity with blockchain immutability for tamper-evident records.