Infra Project 2025
ICT Infrastructure project PRO4TF023-3011 & ICT-infrastruktuurit - Projekti ICI008AS3A-3002

SisuCTF Hack. Defend. Conquer. Active Directory capture-the-flag competition for hackers.

Museum3D - Dive inside water filled cave. A 3D game for museum, using real 3D maps created by divers.

JES Automated Plant Watering and Monitoring System. RoomTracr Track room occupancy and environmental conditions. ÄJAK Never forget your keys. AIMLOps Improvements to MLOps platform.

2025 projects completed.

Create your own project with your team. You'll get the whole 10 cr to build your own project.


Course name and code:	ICT Infrastructure project pro4tf023-3011 and ICT-infrastruktuurit - Projekti pro4tn004-3002
Timing	2025 whole spring, periods p3 and p4.
Credits	10 cr
Classes	Blended: physical meetings in timetable + working weekly in groups + steering meetings
Max students	30
Language	English (rally English accepted for our meetings)
Remote	No, blended: both online and in Pasila pa5001.
Feedback	5.0 / 5 Excellent feedback.
Services	Moodle, Jitsi, Zoom. Optionally Tero's list.
Teachers	Tero Karvinen and Harto Holmström
First class	2025-01-17 w03 Fri Fri 11:00, in Haaga-Helia Pasila pa5001

Presentations are in English. If you're in an all Finnish group, you can use Finnish internally. But this is a great chance to practice real-life rally English.

Timetable

The course consists of

Individual project work every week
Team meetings every week (or more)
Guidance meeting (teacher+group)
Meetings with all groups, listed below

Time	Agenda
2025-01-17 w03 Fri	Course kick-off (introductions, outlining project topics and project plan) 11-14 pa5001
2025-01-24 w04 Fri	Specification of the project topic, starting the project plan. 11-14 pa5001.
2025-01-31 w05 Fri	Working on the project plan and finalizing the project plan. 11-14 pa5001.
2025-02-07 w06 Fri	Presentations of project plans. 11-14 pa5001.
(w07)	(Project implementation)
(w08)	(No classes, winter holiday)
(w09 - w17)	(Project implementation. Note that w12 is an intensive week)
(w18)	(Finalizing the project, project documentations and reports)
2025-05-09 w19 Fri	Project presentations . 11-14 pa5001.
2025-05-16 w20 Fri	project presentations (continued). 11-14 pa5001.

Reserve these important whole group meetings from your calendar. In addition to these meetings, you'll be working on your project every school week.

You can schedule your group work with your group as you wish (within reason). Group and supervisory meetings have mandatory participation, and they happen at specific times.

*Official timetable in Moodle.

Feedback - 2 channels

Thank you already! Feedback is highly valuable and important for me.

1) Free form feedback as a comment on this page

Write your comment on this page.

You can write whatever you want. No need to repeat the questions, but they are here to get you started. Put some email into email field so that the form works, use nomail@example.com.invalid if you don't want to put your own.

Did you learn something? Do you now know something you did not know before the course? (Models, frameworks, ideas, tools, project work?)
Did you do something for the first time? (Used some technique or a tool for the first time?)
Is this useful? Are these skills and this knowledge useful in companies or your work?
How did you like the presentations? Interesting subject? Did you like presenting? Commenting presentations?
How did you like Tero's or Harto's guidance and advice?
Feelings: did you enjoy the course? Did you like the atmosphere in the classes?
How could I improve the course? (I can make almost any change here, if it's important)
Would you recommend the course? Have you already recommended it? Who would benefit from the course (a colleague, a fellow student)?

2) Numeric feedback to Haaga-Helia feedback system (MyNet / Peppi)

Feedback in MyNet (Peppi)

Numeric feedback is used, among other things, for comparing Haaga-Helia courses.

1-worst, 5-best

Your active participation in studies
Achieving the learning goals
The study methods supported learning
The study environment supported learning
Benefits to your career

Open, you can copy the same answer you gave earlier

What promoted your learning?
How would you develop the implementation / group of implementations further so that the learning goals could be achieved better?

Your overall assessment of the implementation, 1-worst, 5-best

How likely would you recommend the course to your fellow students? 1-worst, 10-best.

Thank you for your feedback, and thank you for our course!

Optional: Keep up with Linux & security, join Tero's list. (And get invitations to visitors on security)

See you in my future courses! Would you like to be a hacker? Study Cyber in Haaga-Helia.

Student Projects

Like greek to me? Don't worry, since 2017 we have had projects of every level, from "dog ate my homework" to "teachers amazed". I have guided the projects with Harto Holmström, but the real work has been done by the students. You can see their names or nicks in the linked articles. On the final presentations they usually find that they could not have believed in the first day what they would succesfully build.

2025 projects

SisuCTF "Hack. Defend. Conquer." Windows pentest lab, with multiple targets. Proxmox, Windows, Active Directory, CSC cloud, Dell PowerEdge R7415, Ubiquiti EdgeRouter Pro 8, various pentest tools on Linux. SisuCTF GitHub. Noora Kervinen et al.

Museum3D. Dive inside water filled cave. A 3D game for museum, using real 3D maps created by divers. Godot, Blender. Pasi Lammi, Andréas, Olga Israelian.

JES Automated Plant Watering and Monitoring System. Arduino, MQTT, Telegraf, InfluxDB, Grafana. Emilia Hauskaviita, Jade et al.

RoomTracr Track room occupancy and environmental conditions. ESP32, Environ Rapsberry Pi, PostgreSQL, Grafana. Jasmin Huttunen et al.

ÄJAK Never forget your keys. Arduino, RFID. Essi Krakau, Julius Jäntti, Ville Kreander.

AIMLOps Improvements to MLOps platform. Forked repository also contains material from the mothership.

2023 projects

PhishSticks USB HID attack simulation

PhishSticks can simulate USB HID attacks for penetration testing. When USB device is connected, it drops the payload without any other user action. Sample payloads are keylogger, reverse shell and ransomware simulation. Windows 10 Defender with default settings is bypassed.

PhishSticks video is a good overview of the capabilities. PhishSticks was also presented on my ethical hacking course and in HelSec flash talks.

Remember to keep your pentesting work both legal and ethical. Never connect an unknown USB device to your computer. PhishSticks also provides more advanced mitigations you can implement in your enterprise network.

SmartDisc frishbee throw measurement

SmartDisc, a frisbee throw measurement prototype.

SmartDisc is an ESP32-WROOM microcontroller based device on the frisbee. It uses MPU-6050 3 access gyroscope and accelometer chip for tilt and acceleration measurements, and estimates speed based on acceleration. ESP32 built-in Bluetooth is used for connecting to cell phone. The interface is serial over USB. The work is a functional prototype. The device is not rugged or small yet, and speed estimates are not verified.

I had a change to throw the prototype and see my stats on a cell phone.

SmartQuery AI bot about Haaga-Helia courses

SmartQuery, an AI chatbot for Haaga-Helia courses. Part of Haaga-Helia study guide was crawled and stored to a vector database. An open weight model Llama 2 uses the vector database to answer users questions. This is called retrieval-augmented generation (RAG). User can access a web app to chat with the bot. (A demo was available in December 2023).