The students will be organised in a cohort that will jointly move around the four universities in the master consortium. This way, they will stay:
The curriculum is structured into four semesters, for a total of 12 mandatory classes and 4 optional classes to be chosen among 12.
The core of the curriculum consists of the following mandatory classes:
The students will then choose one class among the following electives in the I semester (Padova):
one among the following electives in the II semester (Vilnius):
and finally, two classes among the electives in the III semester (Granada):
The IV semester will be mainly devoted to the thesis work, and writing. It will be spent by the students as an internship either in a company, or in a research institution.
The programme conclusion will be held at University of Minho with the thesis defence by all students which will be preceded by a practical laboratory exercise.
In addition to this, as an academic program, our master seeks to be agnostic, prioritising training in open-source tools and platforms. The following table includes the platforms and tools used, highlighting those that are used more intensively.
| Platform/tool type | Members |
| Cybersecurity frameworks | NIST CSF, ISO/IEC 27000 family, CIS Controls, and FAIR (Factor Analysis of Information Risk) |
| Cyber Intelligence frameworks and tools | MISP, STIX/TAXII, MITRE ATT&CK, and Open Source Intelligence (OSINT) Platforms like: Shodan, VirusTotal, and Censys |
| Network security-oriented tools | Wireshark, Nmap, Suricata, Zeek, iptables, pfSense |
| Computer security-oriented tools | ClamAV, OSSEC, Sysmon, Cuckoo Sandbox |
| Vulnerability management | Nessus, OpenVAS, Intruder, Nikto, Paros Proxy, and SQLMap |
| Event management systems (SIEM) | OSSIM, Security Onion, Greylog, Wazuh, Prelude SIEM, QRadar Community Edition, and the ELK stack (Elasticsearch, Logstash, Kibana) |
| Identity management and access control | Keycloak, Shibboleth, Apache Syncope, FreeIPA, Okta, Kerberos, and Microsoft Azure Active Directory |
| Security verification of software and web applications | OWASP ZAP (Zed Attack Proxy), Burp, Acunetix, BeEF, Wfuzz |
| Incident response and forensic analysis | TheHive Project, Carbon Black (Cb) Response, Cyphon, FireEye Mandiant, EnCase Forensic, and Autopsy |
| Encryption and Cryptography | OpenSSL, VeraCrypt, and Hashcat |
| Pentesting | Kali Linux, Parrot Security OS, Arch Linux (BlackArch), Burp Suite, Aircrack-ng, Metasploit Framework, Social-Engineer Toolkit (SET), and Faraday |
For any questions:
