1. Create cybersecurity analytics with SDT algorithms for cyber incident responses (see the White House Cyberspace Policy Review (pdf)); Assess the sensitivity of detection and response tendency for cyber incident detection rules. SDT stands for signal detection theory (see illustration below with cyber incident and event distributions)

2. Build a REST service with visualization to show algo output (hit, fa, miss, cr) for alert (signal identification) bias and sensitivity.
 

3. Network analysis and signal detection with Wireshark and WinPcap
 

4. Hadoop monitoring, modeling and analytics (CDH, Wireshark, VMware, Linux).