Master in Cybersecurity and Artificial Intelligence

An introduction to the current threat ecosystem, the actors involved in it, and the methodologies used to analyze real-world attacks. The course covers the main reference frameworks for understanding how adversaries operate and how to anticipate risks.

Evolution of the global threat landscape and current trends Types of cybercriminals and advanced actors The cybercrime economy and illicit business models

MITRE ATT&CK and Cyber Kill Chain frameworks Threat modeling and risk analysis techniques

A study of the technical fundamentals that make it possible to protect digital infrastructures. Students will understand how secure communications, operating systems, and the cryptographic mechanisms underpinning trust on the Internet work.

Network protocols and main attack surfaces Security in operating systems and critical services TLS, digital certificates, and PKI

Modern cryptography: encryption, hashing, and digital signatures Secure management of keys, secrets, and credentials Introduction to post-quantum cryptography

Identity has become the new security perimeter. This topic explores the authentication, authorization, and access control mechanisms that protect modern organizations.

Identity and access management (IAM) Multifactor authentication and passwordless models Identity federation and Single Sign-On

Privileged account management (PAM) Zero Trust architectures and adaptive access

An analysis of the main security challenges in cloud infrastructures and hybrid models. Students will study the technologies and best practices most in demand at companies today.

Shared responsibility model in the cloud DevSecOps Identity management in AWS, Azure, and Google Cloud Insecure configurations and common mistakes

Workload protection and cloud security posture Container and Kubernetes security Protection of APIs and exposed services

A professional introduction to offensive security audits, from planning through to gathering information from open sources.

Pentesting methodologies and standards Scope definition and rules of engagement Reconnaissance and information gathering (OSINT)

Social engineering and target profiling Relationship with professional certifications in the sector

A study of the most common vulnerabilities found in modern web applications and API services, which are responsible for a large share of today's security incidents.

OWASP Top 10 and the most common risks Injections and input manipulation Cross-Site Scripting (XSS) and browser attacks Authentication and access control failures

Advanced vulnerabilities in modern applications Secure Software Development (Secure SDLC) Security in REST and GraphQL APIs

An analysis of the techniques attackers use to compromise corporate networks and reach critical assets within an organization.

Privilege escalation and lateral movement Attacks on Active Directory and Kerberos Pivoting techniques between systems

Exploitation of services and insecure configurations Simulation of common ransomware attacks

 Moving from vulnerability hunting to the simulation of complete attack campaigns inspired by real threats. 

Command & Control (C2) frameworks Techniques for evading defensive mechanisms Persistence and maintaining access

Data exfiltration Purple Teaming and offensive-defensive collaboration Adversary emulation based on MITRE ATT&CK

An introduction to modern security operations and to the technologies that make it possible to detect malicious activity in real time.

How a SOC works and how it is organized Event collection and normalization Development of detection rules

Alert correlation and analysis Security performance metrics Automation through SOAR

Learning proactive techniques to identify threats before they have a significant impact on the organization.

The threat intelligence lifecycle Indicators of compromise and adversary tactics Analysis and prioritization frameworks

Hypothesis-driven investigation Consuming and generating actionable intelligence

Methodologies and tools for investigating security incidents, preserving evidence, and understanding the scope of an intrusion.

Incident management and coordination Containment, eradication, and recovery Forensic analysis of systems and networks

Chain of custody and legal validity Introduction to malware analysis

Best practices for reducing the attack surface and managing vulnerabilities efficiently in enterprise environments.

Hardening of systems and services End-to-end vulnerability management Risk-based prioritization

Patching and remediation strategies Operating EDR and XDR platforms

Using artificial intelligence to strengthen the detection, investigation, and response to security incidents.

Intelligent automation of SOC operations AI-augmented analysts Anomaly and behavior detection

UEBA and advanced user analytics Risks and limits of automation

Protecting machine learning-based systems against attacks targeting data, models, and training processes.

Fundamentals of adversarial ML Evasion and manipulation attacks Data and model poisoning

Model theft and extraction Privacy and inference risks Robustness and defense strategies

An analysis of the specific risks of generative models and of the enterprise applications built on top of them.

OWASP Top 10 for LLMs Risks of synthetic content generation Prompt Injection and context manipulation

Protection of prompts and internal configurations Risks in RAG and external sources Validation and control of responses Secure design of GenAI applications

Study of the emerging risks associated with autonomous agents capable of executing actions, using tools, and making complex decisions.

Agentic AI architectures Risks associated with tools and connectors Permission and privilege management

Security in MCP environments Protection of memory and multi-agent execution Isolation and control strategies

Application of offensive techniques to assess AI systems and an understanding of how attackers use artificial intelligence to amplify their capabilities (identity impersonation, large-scale influence campaigns, etc.).

AI Red Teaming methodologies Jailbreaks and adversarial evaluation Specialized analysis tools Deepfakes and synthetic impersonation

AI-driven phishing Autonomous agents for influence campaigns Emerging threats and autonomous malware

Introduction to the governance and management processes that turn cybersecurity into a strategic function within the organization.

Risk identification and assessment Treatment and mitigation ISO 27001 and international frameworks

NIST CSF and security governance Audits and monitoring Dashboards and executive metrics

A practical view of the main standards and regulations affecting public and private organizations in Europe.

NIS2 Directive DORA Regulation European AI Regulation (AI Act)

Cyber Resilience Act GDPR and data protection Efficient integration of regulatory requirements

Analysis of security challenges in industrial infrastructures, critical systems, and connected devices.

IT and OT convergence SCADA and PLC systems IEC 62443 and industrial standards

Security in critical environments Protection of connected devices and IoT

Preparation for the transition to quantum-resistant algorithms and analysis of future risks to current cryptographic infrastructures.

The quantum threat and future risks New NIST standards Crypto-agility and cryptographic inventory

Migration strategies Protecting PKI, TLS, and digital signatures

Development of the management skills needed to lead cybersecurity programs and run security as a strategic business function.

Designing security strategies Crisis management and communication Corporate governance and reporting

Third-party and supply chain management Budgets and decision-making Legal liability and executive leadership