Home / FACULTAD DE CIBERSEGURIDAD Y CLOUD COMPUTING / Master in Cybersecurity

Master in Cybersecurity

Include free content with your subscription

Request Free Information

I agree with the Privacy Policy.

About this course

The Master in Cybersecurity is designed for those professionals who want to update their knowledge and discover the main aspects to be taken into account in any company to ensure the security of their information. It is also aimed at those stude...

University degree

1500 h

Online

60 ECTS (Créditos)

Qualification of Master in Cybersecurity

Double Degree: - Official Title of Official University Master's Degree in Cybersecurity issued by the e-Campus University accredited with 60 University ECTS. Its completion will entitle the student to obtain the corresponding Official Master's Degree, which may enable the completion of the Doctoral Thesis and obtain the title of Doctor / a. - Master's Degree in Cybersecurity with 1500 hours issued by EUROINNOVA INTERNATIONAL ONLINE EDUCATION, member of the AEEN (Spanish Association of Business Schools) and recognized with academic excellence in online education by QS World University Rankings.

This training includes free content with your Educa University subscription.

Not a subscriber yet? At Educa University, we respond nimbly to the educational needs of a digitalised and constantly changing world. We are leaders in the development of educational programmes and AI tools, with partnerships with prestigious universities in Europe, the United States and Latin America.

Subscribe now

Objectives

To learn the main aspects of cybersecurity and its application.

Know the legislation and regulations applicable to the world of cybersecurity.

To discover what architecture and protocols are used in computer networks to improve security.

To use the main techniques of cryptography, cracking and reverse engineering.

Learn what ethical hacking is, what are its main phases and how to carry out a computer audit.

To use OWASP as the backbone for secure web development.

Content

MODULE 1. LEGISLATION, SECURITY POLICY AND CYBERINTELLIGENCE

UNIT 1. INTRODUCTION AND BASIC CONCEPTS
The information society
Design, development and implementation
Success factors in information security
UNIT DIDACTIC 2. ESSENTIAL INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS) STANDARDS
International Standards and Norms on ISMS. ISO 27001:2017
Legislación: Laws applicable to ISMS (GDPR)
UNIT DIDACTIC 3. SECURITY POLICY: RISK ANALYSIS AND MANAGEMENT
ISMS Implementation Plan
Risk Analysis
Risk Management
UNIT DIDACTIC 4. MALWARE CONTROL
Malware detection and containment systems
Malware control tools
Security criteria for configuring malware protection tools
Determining requirements and update techniques for malware protection tools
Relationship of audit logs of Malware protection tools
Establishing monitoring and testing of Malware protection tools
Malware analysis using disassemblers and controlled execution environments
UNIT 5. SOCIAL ENGINEERING, WEB ATTACKS AND PHISHING
Introduction to social engineering
Gathering information
Social engineering tools
Attack techniques
Attack prevention
Introduction to phishing
Phishing
Man in the middle

MODULE 2. COMPUTER NETWORKS: ARCHITECTURE, PROTOCOL AND CYBERSECURITY

UNIT 1. INTRODUCTION TO THE NETWORK
Main elements of a network
Network technology
Business continuity support
UNIT 2. PROTOCOL STANDARDIZATION
OSI model
Pragmatic approach to the layered model
Standards and organizations
UNIT 3. DATA TRANSMISSION AT THE PHYSICAL LAYER
Role of a network interface
Configuration options and parameters
Booting from the network
Data encoding
Signal conversion
Transmission media
UNIT DIDACTIC 4. COMMUNICATION SOFTWARE
Network card configuration
Network card driver installation and configuration
Protocol stack
Detecting a network problem
TEACHING UNIT 5. NETWORK ARCHITECTURE AND INTERCONNECTION
Topologies
Choosing the adapted network topology
Communication management
Network interconnection
UNIT DIDACTIC 6. LOWER LAYERS OF PERSONAL AND LOCAL NETWORKS
Lower layers and IEEE
Ethernet and IEEE 802.3
Token Ring and IEEE 802.5
Wi-Fi and IEEE 802.11
Bluetooth and IEEE 802.15
Other technologies
UNIT TEACHING 7. MAN AND WAN NETWORKS, PROTOCOLS
Local Network Interconnection
Remote Access and Virtual Private Networks
TEACHING UNIT 8. MID AND HIGHER LAYER PROTOCOLS
Major protocol families
IP protocol version 4
IP protocol version 6
Other Internet layer protocols
Voice over IP (VoIP)
TCP and UDP transport protocols
TCP/IP application layer
TEACHING UNIT 9. PROTECTING A NETWORK
Understanding the need for security
Attack tools and types
Protection concepts in the local network
Protecting network interconnection
UNIT 10. NETWORK REPAIR
Introduction to network repair
Low-layer diagnostics
Using adapted TCP/IP tools
High-layer analysis tools
TEACHING UNIT 11. SECURE COMMUNICATIONS: SECURITY BY LEVELS
Physical Level Security
Link Level Security
Network Level Security
Transport Level Security
Application Level Security
UNIT DIDACTIC 12. APPLICATION OF A PUBLIC KEY INFRASTRUCTURE (PKI)
Identifying the components of a PKI and their relationship models
Certification Authority and its elements
Certificate Policy and Certification Practice Statement (CPS)
Revoked Certificate List (CRL)
How Certificate Signing Requests (CSR) work
Privilege Management Infrastructures (PMI)
Attribute Certificate Fields
Applications that rely on the existence of a PKI
UNIT DIDACTIC 13. INTRUSION DETECTION AND PREVENTION SYSTEMS (IDS/IPS)
General concepts of incident management, intrusion detection and prevention
Identification and characterization of system operating data
Most frequent IDS architectures
List of the different types of IDS/IPS by location and functionality
Security criteria for establishing the location of IDS/IPS
UNIT DIDACTIC 14. IDS/IPS SYSTEMS IMPLEMENTATION AND COMMISSIONING
Preliminary analysis
Definition of intrusion attempt cutoff policies in IDS/IPS
Analysis of events logged by IDS/IPS
Relationship of IDS/IPS audit logs
Establishing the required levels of IDS/IPS updating, monitoring and testing
UNIT DIDACTIC 15. INTRODUCTION TO SIEM SYSTEMS
What is a SIEM?
Evolution of SIEM systems: SIM, SEM and SIEM
Architecture of a SIEM system
UNIT 16. SIEM SYSTEM CAPABILITIES
Problems to be solved
Log management
IT regulations
Event correlation
SIEM solutions on the market

MODULE 3. CRACKING, REVERSE ENGINEERING AND CRYPTOGRAPHY

UNIT 1. INTRODUCTION AND BASIC DEFINITIONS
Concept of Reverse Engineering
Characteristics of Reverse Engineering
Advantages of using Reverse Engineering
UNIT DIDACTIC 2. TYPES OF REVERSE ENGINEERING
Data Reverse Engineering
Reverse Engineering of Logic or Process
Reverse Engineering of User Interfaces
UNIT DIDACTIC 3. CRACKING TOOLS
Debuggers
Disassemblers
Reverse Compilers or Decompilers
UNIT DIDACTIC 4. CRYPTOGRAPHY
Historical Perspective and Objectives of Cryptography
Information Theory
Security Properties that can be controlled by the application of cryptography
Private Key or Symmetric Cryptography
Public or asymmetric key cryptography
Most commonly used cryptographic algorithms
Hash functions and the criteria for their use
Key exchange protocols
Encryption tools
TEACHING UNIT 5. DIFFERENT APPLICATIONS OF PUBLIC KEY CRYPTOGRAPHY
Applications of public and private cryptography
Digital certificate
Electronic ID
Bitcoin

MODULE 4. ETHICAL HACKING AND COMPUTER AUDITING

UNIT 1. INTRODUCTION AND PREVIOUS CONCEPTS
What is ethical hacking?
Legal aspects of ethical hacking
Ethical hacker profiles
UNIT 2. PHASES OF ETHICAL HACKING IN SYSTEM AND NETWORK ATTACKS
Types of attacks
Ethical hacking tools
Vulnerability testing
UNIT DIDACTIC 3. PHASES OF ETHICAL HACKING IN WIFI NETWORK ATTACKS
Types of attacks
Ethical hacking tools
Types of WiFi security
Sniffing
TEACHING UNIT 4. PHASES OF ETHICAL HACKING IN WEB ATTACKS
Types of attacks
Ethical hacking tools
Types of web security
Type of security testing in web environments
TEACHING UNIT 5. INFORMATION SECURITY AUDITING
General Criteria
Application of personal data protection regulations
Tools for systems auditing
Description of firewall aspects in information systems audits
Guidelines for the execution of the different phases of information systems auditing

MODULE 5. INCIDENT MANAGEMENT AND FORENSIC ANALYSIS

UNIT 1. SECURITY INCIDENT RESPONSE
Procedure for collecting information related to security incidents
Exposition of the different techniques and tools used for the analysis and correlation of security information and events
Intrusion verification process
Nature and functions of national and international CERT-type incident management bodies
UNIT DIDACTIC 2. INTRUSION ATTEMPT NOTIFICATION AND MANAGEMENT PROCESS
Establishing responsibilities
Categorization of incidents arising from intrusion attempts
Establishing the detection process and incident logging tools
Establishing the level of intervention required based on the foreseeable impact
Establishing the systems resolution and recovery process
Process for communicating the incident to third parties
UNIT DIDACTIC 3. COMPUTER FORENSIC ANALYSIS
General Concepts and Objectives of Forensic Analysis
Statement of the Lockard Principle
Guide to Collecting Electronic Evidence
Guide to Analyzing Collected Electronic Evidence
Guide to Selecting Forensic Analysis Tools
TEACHING UNIT 4. DATA SUPPORT
Data acquisition: importance in digital forensics
Layer model
Recovering deleted files
File analysis

MODULE 6. WEB DEVELOPMENT SECURITY

UNIT 1. INTRODUCTION TO WEB SECURITY
What is web security?
Threats to a website
Tips for keeping a website secure
Other web security tips
Secure web hosting providers
UNIT DIDACTIC 2. OWASP DEVELOPMENT
What is OWASP? And OWASP Development?
What is ASVS?
Using ASVS
Threat architecture, design and modeling requirements
Authentication verification requirements
Session management verification requirements
Access control verification requirements
Encryption validation, sanitization and verification requirements
Stored cryptography verification requirements
Verification handling and error logging requirements
Data protection verification requirements
Communications verification requirements
Malicious code verification requirements
Business logic verification requirements
File and resource verification requirements
API and web service verification requirements
Configuration verification requirements
Internet of Things verification requirements
Glossary of terms
UNIT DIDACTIC 3. OWASP TESTING GUIDE
Introductory Aspects
The OWASP Testing Guide
The OWASP Testing Framework
Web Application Security Testing
Test Reports
UNIT DIDACTIC 4. OWASP CODE REVIEW
Introductory Aspects
Secure Code Review
Methodology
TEACHING UNIT 5. OWASP TOP TEN
A1:2017 Injection
A2:2017 Broken authentication
A3:2017 Exposure of sensitive data
A4:2017 External XML entities (XXE)
A5:2017 Broken access control
A6:2017 Security misconfiguration
A7:2017 Cross-Site Scripting (XSS)
A8:2017 Insecure deserialization
A9:2017 Use of components with known vulnerabilities
A10:2017 Insufficient logging and monitoring

MODULE 7. CYBERSECURITY APPLIED TO ARTIFICIAL INTELLIGENCE (AI), SMARTPHONES, INTERNET OF THINGS (IOT) AND INDUSTRY 4.0

TEACHING UNIT 1. CYBERSECURITY IN NEW TECHNOLOGIES
Concept of ICT security
Types of ICT security
Secure applications in Cloud
Enterprise Mobility Management (EMM) platforms
Secure WiFi networks
Use case: ICT security in a document management system
UNIT DIDACTIC 2. SMARTPHONES CYBERSECURITY
Mobile security best practices
Attack protection in mobile network environments
UNIT DIDACTIC 3. ARTIFICIAL INTELLIGENCE (AI) AND CYBERSECURITY
Artificial Intelligence
Types of artificial intelligence
Impact of Artificial Intelligence on cybersecurity
UNIT DIDACTIC 4. CYBERSECURITY AND INTERNET OF THINGS (IoT)
Internet of Things (IoT) Context
What is IoT?
Elements that make up the IoT ecosystem
IoT architecture
Devices and elements used
Usage examples
Challenges and future work streams
IoT vulnerabilities
IoT-specific security needs
UNIT TEACHING 5. IT SECURITY IN INDUSTRY 4.0
Industry 4.0
Cybersecurity needs in Industry 4.0

MODULE 8. CYBERSECURITY APPLIED TO E-COMMERCE AND CLOUD COMPUTING

UNIT 1. GENERAL DATA PROTECTION REGULATION (GDPR) IN E-COMMERCE PROJECTS
Determination of the key aspects of electronic commerce (e-commerce)
Identification of the necessary elements to face with guarantees the adaptation to the General Data Protection Regulation in ecommerce projects
Understanding of the basic legal aspects that have to be respected by an online sales service
Exposure of consumer and user obligations
UNIT DIDACTIC 2. CYBERSECURITY IN ELECTRONIC COMMERCE
Identification of cyber threats and ways to promote cybersecurity in electronic commerce
Determination of appropriate technical and organizational measures to ensure an adequate level of security
Action in the event of a security incident
UNIT DIDACTIC 3. INTRODUCTORY ASPECTS OF CLOUD COMPUTING
Origins of cloud computing
What is cloud computing
Characteristics of cloud computing
Cloud and business
Basic models in the cloud
UNIT DIDACTIC 4. CLOUD HARDWARE
Virtualization
Virtualization categories
Cloud storage
Reliable cloud storage providers
UNIT DIDACTIC 5. CLOUD SERVICES
Cloud services for the user
Virtual desktop or VDI
Remote data center service
UNIT DIDACTIC 6. SECURITY, AUDITING AND COMPLIANCE IN THE CLOUD
Introduction
Business Risk Management
Basic Legal Issues. eDiscovery
Security and quality audits in cloud computing
The information lifecycle
UNIT 7. ADVANCED CONCEPTS OF CLOUD COMPUTING
Cloud Interoperability
Data Processing and Operations Center
Encryption and Key Management
Identity Management
UNIT DIDACTIC 8. SECURITY AND LEGAL ASPECTS OF CLOUD COMPUTING
(LOPD) Data Protection Law
Intellectual Property
Labor Relations
The challenges of Cloud Computing
Security implementation in Cloud Computing
Forensic analysis in Cloud Computing
Cloud Security Alliance (CSA)

MODULE 9. MASTER'S THESIS

Methodology

Con nuestra metodología de aprendizaje online, el alumno comienza su andadura con nosotros a través de un campus virtual diseñado exclusivamente para desarrollar el itinerario formativo con el objetivo de mejorar su perfil profesional. Las horas de teleformación realizadas en el Campus Virtual se complementan con el trabajo autónomo del alumno, la comunicación con el docente, las actividades y lecturas complementarias y la labor de investigación. El Proyecto Fin de Máster se realiza tras finalizar el contenido teórico-práctico en el Campus que será calificado con una puntuación entre 0-6 puntos. Finalmente tendrán que realizar un examen oficial de forma presencial en español de cada una de las asignaturas del máster, pudiendo realizarse en la sedes de Madrid o Bogotá o en cualquiera de las sedes de la Cámara de Comercio con la que la Universidad tiene un convenio para la realización de las evaluaciones presenciales. Actualmente estos exámenes se están realizando de forma online excepcionalmente por la situación de Covid.

What does it prepare you for?

Thanks to the Official Master's Degree in Cybersecurity you will use the main standards and protocols in computer systems applying the current legislation and regulations. You will anticipate threats with detection and analysis mechanisms and perform computer audits. You will discover cryptographic and reverse engineering techniques by applying ethical hacking. In addition, you will use the main OSINT cybersecurity tools.

Who is it aimed at?

Career opportunities

After completing this Master's Degree in Cybersecurity you will be able to access one of the professional fields with more job opportunities nowadays, cybersecurity. This master's degree will open the doors to professional jobs as a business cybersecurity expert or cybersecurity analyst. You will be able to develop as an IT security consultant or manager, ethical hacker or IT systems auditor.