Responsible: Anders Carlsson, Oleksii Baranovskyi – Blekinge Institute of Technology

Companies and their IT systems are affected by advanced intrusions, various ransomware attacks and or thefts of both sensitive and secret information. In case of being compromised companies need to understand their weak points, ways of intrusion and attackers attributes. The course focuses on developing the student’s skills to investigate and analyze complex cyber attacks (Cyber Kill Chain) and to track the threat actor, discover exploited vulnerabilities so that companies can restore data and system integrity.

Digital forensic is the process of detecting and investigating hacking attacks via properly extracted and analyzed evidence and artifacts to report the crime and prevent similar attacks in the future. The crime with computers and digital technologies in today’s cyber world is on the rise. Digital forensic techniques are being used by law enforcement agencies, police, government, and corporate entities around the world. The tools and techniques covered in the course will prepare the attendees to conduct digital forensic investigations using ground-breaking technologies.

More info:

• Course title in Swedish: Avancerad Digital Undersökningsteknik
• Course Code: DV2611
• Admission requirements: Admission to the course require at least 120 credits, of which at least 90 credits are in a technical area, and a minimum of 2
  years professional experience within an area related to software-intensive product and/or service development (shown by, for example, a work certificate from an employer).
• The course runs at 25% study pace, on distance
• All education and examination are held on distance

Responsible: Dragos Ilie – Blekinge Institute of Technology

Cryptography is a collective for different methods that are used to modify data with the aim of prevent unauthorized access or modifications to it. As a result, cryptography is an important part of modern cyber security. During this course you will study the basics for different cryptographic methods. In addition, you will also learn how to use them in a practical way in order to increase the security for IT-systems.

More info:

• Course title in Swedish: Tillämpad kryptografi 
• Course Code: DV2616
• Admission requirements: Admission to the course require at least 120 credits, of which at least 90 credits are in a technical area, and a minimum of 2
  years professional experience within an area related to software-intensive product and/or service development (shown by, for example, a work certificate from an employer).
• The course runs at 25% study pace, on distance
• All education and examination are held on distance

Responsible: Alexander Adamov – Blekinge Institute of Technology

The course aims to provide students with the skills of real-world threats analysis including phishing attacks, targeted attacks (APTs), cyber weapon, ransomware (cryptolockers) The analysis of such threats requires a special type of education focused on the analysis of modern threats and protection technologies.

The course gives knowledge and practical skills in malware analysis for Windows and Android platforms (x86 and ARM). The students will obtain practical skills in reverse engineering, static and dynamic analysis of malware used in the real-life cyber attacks.

More info: 

• Course title in Swedish: Analys av Skadlig Programvara
• Course Code: DV2613
• Admission requirements: Admission to the course require at least 120 credits, of which at least 90 credits are in a technical area, and a minimum of 2
  years professional experience within an area related to software-intensive product and/or service development (shown by, for example, a work certificate from an employer).
• The course runs at 25% study pace, on distance
• All education and examination are held on distance

Course responsible: Volodymyr Tkach, Victor Kebande – Blekinge Institute of Technology 

Organisations today produce a large amount of data. This course covers how to utilize that data for cybersecurity purposes. It covers topics such as how to acquire (e.g., through SIEM) and prepare security data, from collection and storage to management and analysis as well as visualization and presentation, predicting rouge behaviors, and correlate security events. How to use data science to understand and communicate security problems.

More info:

• Course title in Swedish: Datastyrd Säkerhet
• Course code: DV2610
• Admission requirements: Admission to the course require at least 120 credits, of which at least 90 credits are in a technical area, and a minimum of 2
  years professional experience within an area related to software-intensive product and/or service development (shown by, for example, a work certificate from an employer).
• The course runs at 25% study pace, on distance
• All education and examination are held on distance

Course responsible: Volodomyr Tkach, Victor Kebande – Blekinge Institute of Technology 

The main objective of this course is to acquaint students with existing approaches, methods, and tools of machine Learning (ML) for security as well as unveil security issues in ML itself.

This course is divided into the following two parts. First, it covers security problems in Machine Learning (ML) systems, e.g., showing various types of attacks on ML systems in an applied fashion – adversarial ML. Secondly, available methods, tools and other safeguards that could be used against the different types of attacks are covered. The course includes both theoretical introductions to the different attack types and security-enhancing methods and tools, as well as more practical hands-on assignments in Python. After the course the student will have obtained basic knowledge about security-enhancing approaches, and how to use them in order to protect against various risks in ML systems and how to use ML to detect cyber attacks.

More info:

• Course title in Swedish: Maskininlärning och Säkerhet
• Course code: DV2612
• Admission requirements: Admission to the course require at least 120 credits, of which at least 90 credits are in a technical area, and a minimum of 2
  years professional experience within an area related to software-intensive product and/or service development (shown by, for example, a work certificate from an employer).
• The course runs at 25% study pace, on distance
• All education and examination are held on distance

Course responsible: Jianguo Ding, Alexander Adamov – Blekinge Institute of Technology 

This course provides you with advanced and current topics in cyber security relevant to critical infrastructure. You will learn the concepts of critical infrastructure and information infrastructure, their threat actors and agents, their modeling, and their resilience. You will learn threat analysis skills for industrial control systems (ICS), including advanced persistent threats (APTs), exploits, supply chain attacks, wipers, and ransomware, which are often used in cyber attacks against critical infrastructure.

More info:

• Course title in Swedish: Säkerhet för kritisk infrastruktur (operativ teknologi) 
• Course code: DV2617
• Admission requirements: Admission to the course require at least 120 credits, of which at least 90 credits are in a technical area, and a minimum of 2
  years professional experience within an area related to software-intensive product and/or service development (shown by, for example, a work certificate from an employer).
• The course runs at 25% study pace, on distance
• All education and examination are held on distance

Course responsible: Davide Fucci – Blekinge Institute of Technology 

The purpose of the course is to show how security practices can be integrated into different software development processes (traditional, agile, continuous) and how to assess the maturity of the integration. The student will learn about different models, with a focus on a specific one touching upon security practices during software design, implementation, verification, and operation. In order to take different backgrounds and previous knowledge of the students into account, the course also covers the necessary background information on classical and security-oriented software development process models. The course enables students to assess the maturity of secure software development processes based on a model.

More info:

• Course title in Swedish: Säkerhetsinventering för mjukvaruutveckling 
• Course code: PA2587
• Admission requirements: Admission to the course require at least 120 credits, of which at least 90 credits are in a technical area, and a minimum of 2
  years professional experience within an area related to software-intensive product and/or service development (shown by, for example, a work certificate from an employer).
• The course runs at 25% study pace, on distance
• All education and examination are held on distance

Course responsible: Emil Alegroth, Davide Fucci  – Blekinge Institute of Technology 

The purpose of this course is to show how fundamental testing practices are applied in the context of secure software development. The student will learn to integrate automated software testing with different approaches to verify software security, leveraging theories from continuous quality assurance in software development, as well as security best practices.

The course is adapted to give a solid introduction to non testing experts with an interest in software security, and addresses how professionals (developers, managers, decision-makers) can incorporate security into the quality assurance process of their products/services.

More info:

• Course title in Swedish: Kvalitetssäkring av säkerhetskritiska applikationer
• Course code: PA2586
• Admission requirements: Admission to the course require at least 120 credits, of which at least 90 credits are in a technical area, and a minimum of 2
  years professional experience within an area related to software-intensive product and/or service development (shown by, for example, a work certificate from an employer).
• The course runs at 25% study pace, on distance
• All education and examination are held on distance