I have a research on cyber security. Where i worked with patterns of cyber attacks actually and one of the hypothesis of the research is: Cyber-attack gives the same pattern in all the different, different IP addresses. You can check the research from my profile to get some big ideas for you.
Your question's a bit broad - what aspect of infosec/cybersec are you interested in and qualified to investigate?
And what types of research interest you. eg: I am a qualitative & systems researcher - so any research question that is not appropriate would not work for me... you?
I can definitely tell you that a huge area of need in this field is research on human-centric computing and information securiity. But if you are interested only in hardware or software or data-security... these ideas would be no use to you. So I suggest you clarify parameters of interest for your question.