You have to be more specific than that. These days information security is a huge field. Network security is a misnomer since almost no one works on "network security", which is about protocols not applications / operating systems.
I'd suggest being more specific about what sort of project you're interested in. Will you be doing original research on the size of botnets (you and everyone else in the world); maybe write a tool for something, I'd suggest writing a real webapp security assessment tool. I hate doing web app assessments. Another thing that would be really useful would be collaborative information sharing during a pen test (I've put a lot of thought into this one and could give you more pointers)...
If you want to play it safe, just write another fuzzer. Everyone writes fuzzers. Or you could write some VoIP security tools.
Network Behaviour Anomaly Detection & Deep Packet Inspection are two very hot fields with tons of open space for improvement and experimentation. Both of these are extremely general/vague, but just throwing ideas.
In this Social networking era of web 2.0, I would suggest to look into the data security (Privacy data) and its impact of sharing your privacy data across social networks like facebook, twitter, orkut etc......
4 comments
[ 3.1 ms ] story [ 16.7 ms ] threadI'd suggest being more specific about what sort of project you're interested in. Will you be doing original research on the size of botnets (you and everyone else in the world); maybe write a tool for something, I'd suggest writing a real webapp security assessment tool. I hate doing web app assessments. Another thing that would be really useful would be collaborative information sharing during a pen test (I've put a lot of thought into this one and could give you more pointers)...
If you want to play it safe, just write another fuzzer. Everyone writes fuzzers. Or you could write some VoIP security tools.