Infra Project 2025
ICT Infrastructure project PRO4TF023-3011 & ICT-infrastruktuurit - Projekti ICI008AS3A-3002

Create your own project with your team.

You'll get the whole 10 cr to build your own project.

Previous student projects: evil USB keyboard, AI log analysis, physical access control, encrypted communications with free software, machine vision... What will you build?

Course name and code:ICT Infrastructure project pro4tf023-3011 and ICT-infrastruktuurit - Projekti pro4tn004-3002
Timing2025 whole spring, periods p3 and p4.
Credits10 cr
ClassesBlended: physical meetings in timetable + working weekly in groups + steering meetings
Max students30
LanguageEnglish (rally English accepted for our meetings)
RemoteNo, blended: both online and in Pasila pa5001.
Feedback5.0 / 5 Excellent feedback. Five star experience
ServicesMoodle, Jitsi, Zoom. Optionally Tero's list.
TeachersTero Karvinen and Harto Holmström
First class2025-01-17 w03 Fri Fri 11:00, in Haaga-Helia Pasila pa5001

Presentations are in English. If you're in an all Finnish group, you can use Finnish internally. But this is a great chance to practice real-life rally English.

Timetable

The course consists of

  • Individual project work every week
  • Team meetings every week (or more)
  • Guidance meeting (teacher+group)
  • Meetings with all groups, listed below
TimeAgenda
2025-01-17 w03 FriCourse kick-off (introductions, outlining project topics and project plan) 11-14 pa5001
2025-01-24 w04 FriSpecification of the project topic, starting the project plan. 11-14 pa5001.
2025-01-31 w05 FriWorking on the project plan and finalizing the project plan. 11-14 pa5001.
2025-02-07 w06 FriPresentations of project plans. 11-14 pa5001.
(w07)(Project implementation)
(w08)(No classes, winter holiday)
(w09 - w17)(Project implementation. Note that w12 is an intensive week)
(w18)(Finalizing the project, project documentations and reports)
2025-05-09 w19 FriProject presentations . 11-14 pa5001.
2025-05-16 w20 Friproject presentations (continued). 11-14 pa5001.

Reserve these important whole group meetings from your calendar. In addition to these meetings, you'll be working on your project every school week.

You can schedule your group work with your group as you wish (within reason). Group and supervisory meetings have mandatory participation, and they happen at specific times.

*Official timetable in Moodle.

Student Projects

Like greek to me? Don't worry, since 2017 we have had projects of every level, from "dog ate my homework" to "teachers amazed". I have guided the projects with Harto Holmström, but the real work has been done by the students. You can see their names or nicks in the linked articles. On the final presentations they usually find that they could not have believed in the first day what they would succesfully build.

2023 projects

PhishSticks USB HID attack simulation

PhishSticks can simulate USB HID attacks for penetration testing. When USB device is connected, it drops the payload without any other user action. Sample payloads are keylogger, reverse shell and ransomware simulation. Windows 10 Defender with default settings is bypassed.

PhishSticks video is a good overview of the capabilities. PhishSticks was also presented on my ethical hacking course and in HelSec flash talks.

Remember to keep your pentesting work both legal and ethical. Never connect an unknown USB device to your computer. PhishSticks also provides more advanced mitigations you can implement in your enterprise network.

SmartDisc frishbee throw measurement

SmartDisc, a frisbee throw measurement prototype.

SmartDisc is an ESP32-WROOM microcontroller based device on the frisbee. It uses MPU-6050 3 access gyroscope and accelometer chip for tilt and acceleration measurements, and estimates speed based on acceleration. ESP32 built-in Bluetooth is used for connecting to cell phone. The interface is serial over USB. The work is a functional prototype. The device is not rugged or small yet, and speed estimates are not verified.

I had a change to throw the prototype and see my stats on a cell phone.

SmartQuery AI bot about Haaga-Helia courses

SmartQuery, an AI chatbot for Haaga-Helia courses. Part of Haaga-Helia study guide was crawled and stored to a vector database. An open weight model Llama 2 uses the vector database to answer users questions. This is called retrieval-augmented generation (RAG). User can access a web app to chat with the bot. (A demo was available in December 2023).

2022

MuikkuRF - Analyze software radio with machine learning

WiFi probe request tracker

Notihub - Backend server notification system for IoT devices

Cryptocurrency mining dashboard

2021

Bookstore for digital books (Tero's short article)

Where to live

APE Attack Practice Environments

Sovereign network - on-prem email and file sharing

Automatic window blinds

Smart hand sanitation solution

FOSS encrypted communication (Encryption Guide (pdf))

OpenStack private cloud

Private chat server on the cloud

Project Icaros - Raspberry Pi gadget to combined SDR and WiFi scanning information on a map

DigiNut - an evil keyboard hides another invisible keyboard that installs malware by typing commands (Videos: Keylogger + Duckhunt killer, Add Admin user, Tero's article.

Hostile remote control with Windows Defender avoidance (blog, Defender bypass (video))

2020

AiLog - AI analysis of consolidated logs (GitHub, old blog, Youtube)

Physical access control

Network traffic analysis using Moloch (GitHub)

Raspberry Pi NAS

Security audit for client X

VPN gateway for Haaga-Helia labs

Heimdall - Facial recognition

PiCroft smart speaker - a Raspberry Pi client for MyCroft.ai

2019

BillyStat – billiard stats with machine vision

RU@work – WiFi work time logging

DoorCam – email warning if all persons in cam are unknown

Fog – take multicast computer lab disk imaging to production

SpaceState – watch classroom usage with motion sensors

2018

LoRa Tocsin project. (Tero's article LoRa Trough 8 Floors – Using 100 mA)

Centralized logging and analysis of security logs in a network

OpenCV face recognition

Fog OS provisioning with images

Private Docker Cloud

Lumivahti - How much snow (Github)

Open source ERP (buy the book)

VPN to lab

WiFi Penetration Testing (buy the book or download free ebook)

2017

Nuotiovahti - Does the fire burn (Github). Part of Virtuaaliluonto project funded by Euroopan maaseudun kehittämisen maatalousrahasto.

VoiceVoice take my command

Kuvastin - Mirror mirror tell me who (Github, Tero's article Raspberry Mirror Shows Weather and News)

Arctic CCM configuration management with Salt, Puppet, Ansible, Chef