DJM-CYBER: A Joint Master in Advanced Cybersecurity

DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y Yianna Danidou∗ y[email p o ec ed] Eu opean Uni e si y Cyp us Nicosia, Cyp us Sa a Ricci [email p o ec ed] B no Uni e si y o Technology B no, Czech Republic An onio Ska me a [email p o ec ed] Uni e sidad de Mu cia Mu cia, Spain Im e Lendak Eö ös Lo ánd Uni e si y (ELTE) Budapes , Hunga y [email p o ec ed] Ji i Hosek [email p o ec ed] B no Uni e si y o Technology B no, Czech Republic S e ano Zane o s e ano.zane [email p o ec ed] Poli ecnico di Milano Milano, I aly ABSTRACT Va ious publicly a ailable s udies show ha millions o cybe secu- i y expe s a e missing wo ldwide. One possible way o ackle he wo k o ce gap is wi h ailo ed highe educa ion p og ammes. The goal o his pape is o p esen he ele an p ojec s and amewo ks o he Eu opean Union which can guide he de elopmen o no el cybe secu i y educa ion o e ings. We desc ibe he mos ele an and eely a ailable ools and es hem in he de elopmen o a join Mas e s udy p og amme o be o e ed by a conso ium o i e Eu opean uni e si ies. We show ha hese ools allow educa- o s and s udy p og amme de elope s o map hei ou pu s o he Eu opean Cybe secu i y F amewo k de eloped by he ENISA and o he simila amewo ks. We comple e ou wo k wi h a de ailed analysis o a join cybe secu i y mas e p og amme consis ing o ou inno a i e and dis inc ly di e en acks. CCS CONCEPTS •Social and p o essional opics → Model cu icula;•Applied compu ing → Educa ion;•Human-cen e ed compu ing → Human compu e in e ac ion (HCI). KEYWORDS cybe secu i y educa ion, join mas e p og amme, cybe secu i y oles, cybe secu i y p o iles, ENISA ECSF, NICE F amewo k ACM Re e ence Fo ma : Yianna Danidou, Sa a Ricci, An onio Ska me a, Im e Lendak, Ji i Hosek, and S e ano Zane o. 2023. DJM-CYBER: A Join Mas e in Ad anced Cybe - secu i y. In The 18 h In e na ional Con e ence on A ailabili y, Reliabili y and Secu i y (ARES 2023), Augus 29–Sep embe 01, 2023, Bene en o, I aly. ACM, New Yo k, NY, USA, 10 pages. h ps://doi.o g/10.1145/3600160.3605002 1 INTRODUCTION In oday’s digi al landscape, cybe secu i y has eme ged as a c i ical and p essing opic, gi en he g owing eliance o public and p i a e o ganisa ions as well as indi iduals on echnology o hei day- o-day ope a ions and communica ion. Howe e , he demand o This wo k is licensed unde a C ea i e Commons A ibu ion In e na ional 4.0 License. ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly ©2023 Copy igh held by he owne /au ho (s). ACM ISBN 979-8-4007-0772-8/23/08. h ps://doi.o g/10.1145/3600160.3605002 cybe secu i y expe ise o en su passes he a ailabili y o skilled p o essionals who can implemen and main ain e ec i e cybe se- cu i y measu es. As a esul , his skill gap poses ulne abili ies and isks, wi h po en ial consequences o indi iduals, businesses, and e en na ions. Eu ope has been pa icula ly a ec ed by he sho age o cybe se- cu i y expe s, as he demand o hese skills has inc eased apidly in ecen yea s, leading o a signi ican skills gap in he ield. The complex and e e -e ol ing na u e o cybe secu i y necessi a es ongoing aining and educa ion, making i challenging o iden i y, add ess, and upda e he equi ed secu i y skills [ 1 , 2 ]. To add ess his issue, companies, go e nmen s, and academia ha e de ined cy- be secu i y p o iles and ela ed skills in an ad-hoc manne , esul ing in di e se de ini ions o he same equi emen s. The e o e, he e is a need o s anda dize hese p o iles and skills o align wi h he Eu opean pe spec i e, in o de o de elop mo e e icien aining p og ams ha can mee he cu en and u u e aining needs. A no able ou come o hese e o s is he Eu opean Union Agency o Cybe secu i y’s (ENISA) Eu opean Cybe secu i y Skills F amewo k (ECSF) [ 6 ], which has success ully ede ined and consolida ed cy- be secu i y p o iles in o 12 comp ehensi e p o iles ha encompass all necessa y cu en skills, wi h p o isions o u u e skill upda es. The sho age o cybe secu i y expe s con inues o be a pe sis- en challenge, and he demand is expec ed o su pass he supply in he o eseeable u u e. This unde sco es he ongoing need o sus ained in es men in educa ion and aining p og ams, as well as he p omo ion o cybe secu i y as a iable and ewa ding ca ee pa h o a ac mo e alen o he ield. Ac oss Eu ope, he e a e se e al ini ia i es ha emphasize he impo ance o cybe secu i y om an ea ly age, aiming o gene a e inc eased in e es among young people in pu suing a ca ee in cybe secu i y in he u u e [ 3 ]. P o iding comp ehensi e and engaging guidance o eache s a he basic educa ion le els is c ucial, wi h con en ha no only os e s cu iosi y and in e es in he cybe secu i y ield bu also aises awa eness abou cybe secu i y and unde sco es he demand o expe s in his sec o . 2 IMPACT OF THE PROGRAMME In esponse o he skills gap, Eu opean go e nmen s and businesses a e in es ing in educa ion and aining p og ams o cul i a e he nex gene a ion o expe s. One such Eu opean in es men is he E asmus Mundus ini ia i e which leads o Highe Educa ion ins i u- ions (HEIs) o collabo a e and join ly o e specialized Mas e -le el s udy p og ams. E asmus Mundus Join Mas e (EMJM) p ojec s ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Danidou, e al. can ecei e EU unding and be implemen ed by ma u e conso ia in a single s age, o conso ia can be se up wi h he E asmus Mundus Design Measu es lump-sum unding ins umen o he EU. The Designing a Join Mas e in Cybe secu i y (DJM-CYBER) was an EMDM p ojec which aimed o design and de elop a Join Mas e in Ad anced Cybe secu i y p og amme. In o de o ensu e he e ec- i eness and ele ance o he p oposed cu iculum, he conso ium p io i ized academic educa ion o ma ch he p o iles iden i ied in ENISA’s ECSF and he NIST NICE Compe encies amewo k. The design and e en ual es ablishmen o he Join Mas e ’s in Ad anced Cybe secu i y can ha e a signi ican impac by en- hancing educa ion and aining by p o iding a comp ehensi e and specialised cu iculum, in e disciplina y, cu ing-edge esea ch and p ac ical aining; c ea ing a pool o di e se and highly skilled p o essionals, while a ac ing op alen s om ac oss Eu ope and beyond; imp o ing cybe secu i y p ac ices and s anda ds aising he o e all cybe secu i y pos u e in Eu ope; os e ing collabo a i e esea ch and inno a ion among s uden s, acul y, and esea che s om di e en coun ies and ins i u ions, leading o he exchange o ideas, no el esea ch indings, and inno a i e solu ions; s eng h- ening he Eu opean cybe secu i y ecosys em by acili a ing pa - ne ships be ween academia, indus y, and go e nmen , leading o inc eased collabo a ion, in o ma ion sha ing, and join ini ia i es in cybe secu i y esea ch, de elopmen , and policy-making; and add essing he skills gap in he ield by p oducing highly ained g adua es wi h specialized expe ise. G adua es o he p og am would possess ad anced quali ica ions ecognized ac oss Eu ope, making hem highly compe i i e in he job ma ke and capable o mee ing he inc easing demand o skilled cybe secu i y expe s. 3 CYBERSECURITY ROLES AND PROFILES In his sec ion, we b ie ly e iew he NIST NICE Compe encies amewo k and he ENISA Eu opean Cybe secu i y Skills F ame- wo k Role P o iles (ECSF). The conso ium has aligned he cu icu- lum o he ( u u e) Join Mas e ’s P og amme wi h bo h axonomies o ensu e ha g adua es will possess he necessa y knowledge, skills and abili ies ha a e in cu en demand in he cybe secu i y wo k o ce as well as in he u u e, making hem mo e compe i i e and ele an in he job ma ke , and helping o close he skills gap. 3.1 NIST NICE wo k oles The Na ional Ini ia i e o Cybe secu i y Educa ion (NICE) is a Uni ed S a es pa ne ship be ween go e nmen , academia and he p i a e sec o led by he Na ional Ins i u e o S anda ds and Tech- nology (NIST). I suppo s cybe secu i y aining and educa ion p o ide s by de eloping axonomies, s anda ds, and bes p ac ices. Among he c ea ed s anda ds, he NICE F amewo k [ 12 ] p o ides a de ailed desc ip ion o 1) wo k oles, 2) knowledge, skills, and abili- ies (KSAs), and 3) asks o a o emen ioned wo k oles. Acco dingly, his amewo k iden i ies which knowledge and skills a e equi ed by pa icula wo k oles a ailable in he cybe secu i y job ma ke . 3.2 ENISA Cybe secu i y Skills F amewo k - ECSF The ENISA Eu opean Cybe secu i y Skills F amewo k (ECSF) [ 6 ] is he esul o he join e o s o ENISA and he ENISA ad-hoc wo king g oup on cybe secu i y skills amewo k. The ECSF aims o c ea e "a common unde s anding o he ele an oles, compe- encies, skills and knowledge in o de o acili a e cybe secu i y skills ecogni ion and o suppo he design o cybe secu i y- ela ed aining p og ams". The amewo k summa izes all cybe secu i y- ela ed oles in o 12 p o iles, wi h clea ly ou lined ela ed key asks, skills, knowledge, and compe encies. I is impo an o no ice ha he ECSF coun s a o al o 84 key skills and 69 key knowledge a eas de ined. This lis o key skills and knowledge c ea e a common ax- onomy o academia, i.e., hey speci y which knowledge a e needed o be augh . The 12 ECSF p o iles a e as ollows: Chie In o ma ion Secu i y O ice (CISO), Cybe Inciden Responde , Cybe Legal, Policy & Compliance O ice , Cybe Th ea In elligence Special- is , Cybe secu i y A chi ec , Cybe secu i y Audi o , Cybe secu i y Educa o , Cybe secu i y Implemen e , Cybe secu i y Resea che , Cybe secu i y Risk Manage , Digi al Fo ensics In es iga o , and Pene a ion Tes e . 4 RELATED CYBERSECURITY EDUCATION PROJECTS Se e al cybe secu i y amewo ks ha e been de eloped o e he las i e yea s (2017- 2022), aimed a p o iding sui able e e ence s uc u es o di e en pu poses: academic educa ion, p o essional aining, and scien i ic and echnological esea ch. We men ion in pa icula he ollowing amewo ks, due o he b oadness o hei scope and he well-es ablished in e na ional ins i u ions ha p oduced hem: •The Cybe secu i y Cu icula Guidelines (CSEC) [7] •The Cybe secu i y Wo k o ce F amewo k (CWF) [12] •The Eu opean Cybe secu i y Taxonomy (JRC) [11] •The Cybe secu i y Body o Knowledge (CyBOK) [13] • The Eu opean Cybe secu i y Educa ion and P o essional T aining Minimum Re e ence Cu iculum (ECSO) [16] Ou conso ium was composed o pa ne s in ol ed in wo (o e ou ) pilo p ojec s namely Cybe Sec4Eu ope and SPARTA, which we e chosen o add ess he Ho izon 2020 Cybe secu i y call and a e pa o he Eu opean Cybe secu i y Compe ence Ne wo k which aims o s eng hen and sus ain Eu ope’s cybe secu i y compe ence whe e he pilo s collabo a i ely sha e hei achie emen s and e- sul s. Mo eo e , wo membe s o ou pa ne ship a e pa o he Cybe secu i y Skills Alliance – A New Vision o Eu ope (REWIRE) ERASMUS+ Sec o Skills Alliance (SSA) p ojec , which “aims o p o- ide conc e e ecommenda ions and solu ions ha would lead o he educ ion o skill gaps be ween indus y equi emen s and sec o al aining p o ision and con ibu e o suppo g ow h, inno a ion and compe i i eness in he ield o Cybe secu i y” [14]. 4.1 SPARTA - Cu icula Designe SPARTA is a p ojec which c ea ed a long-las ing communi y capa- ble o collabo a ion o de ine, de elop, sha e, and e ol e solu ions ha will help p ac i ione s p e en cybe c ime and enhance cybe - secu i y. SPARTA Deli e able D9.2 [ 8 ] con ains he desc ip ion o he me hodology o designing highe educa ion s udy p og ams and p o essional aining cou ses, speci ically ecommends ha a Mas e ’s deg ee should ha e a leas 40 % o p ac ical lec u es. DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Wi hin he SPARTA p ojec , a no el ee web applica ion, namely he Cybe secu i y Cu icula Designe [ 9 ], was de eloped. This app can be used o design cybe secu i y cu icula ha e lec he needs o pa icula wo k posi ions. The applica ion uses he SPARTA amewo k ha is de i ed om he NIST NICE amewo k. In pa - icula , h ough he inse ion mechanism, he gene a ed cu icula can be analyzed and mapped o he NICE NIST wo k oles. Mo eo e , he applica ion was ex ended o wo k wi h he key skills o he ENISA amewo k and, he e o e, maps he added cu iculum o he ENISA amewo k [10]. 4.2 REWIRE - Cybe secu i y P o ile Wi hin he analysis o he ENISA ECSF amewo k, he REWIRE p ojec ound ha he ENISA key skills and knowledge desc ibing he p o iles a e uniquely ph ased [ 5 ]. Mo eo e , his lis equi es echnical knowledge and can be demanding o be managed o non- expe s o he sec o . A way o o e come his issue is o g oup he key knowledge and skills ha ep esen he exac same concep s bu ph ased in di e en ways. Acco dingly, a o al o 31 g oups we e iden i ied and used as back-end o he de eloped use - iendly REWIRE web applica ions, i.e. he Cybe secu i y P o ile [ 5 ] and Cybe secu i y Job Ads analyze [15]. The REWIRE Cybe secu i y P o ile is an open-sou ce, eely a ailable, dynamic web applica ion which allows he design and he analysis o cu icula. In pa icula , he Cybe secu i y P o ile 1) maps exis ing cu icula, ainings, and ce i ica ions o he ENISA p o iles, 2) iden i ies which cou ses, ainings, and ce i ica ions a e ecommended o a ce ain p o ile, and 3) allows designing a s udy p og am, aining, o ce i ica ion scheme and seeing o which p o- ile is mo e ela ed. This applica ion is an ex en ion o he SPARTA Cu icula Designe o which i sha es he main ea u es. While he Cu icula Designe is in ended only o cu icula, he Cybe secu i y P o ile also inco po a es he design o p o essional aining and ce i ica ion schemes. In he Cybe secu i y P o ile , he cu icula a e mapped o he ENISA p o ile h ough he 31 REWIRE g oup. Fo ins ance, he ollowing g oups/skills belong o he Cybe secu i y A chi ec p o ile: "Collabo a e and Communica e", "Da a P i acy", "Da a Secu i y", "En e p ise A chi ec u e and In as uc u e De- sign", "In o ma ion Secu i y Con ols Assessmen ", "Law, Policy, and E hics", "Ope a ing Sys ems", "Risk Managemen ", "So wa e De- elopmen ", "Technology Fluency", and "Wo k o ce Managemen ". We e e o [5] o mo e de ails. 4.3 Cybe Sec4Eu ope One o he cen al aspec s o he Cybe Sec4Eu ope cybe secu i y pilo p ojec was he iden i ica ion o an educa ion and assessmen amewo k desc ibed in [ 4 ], which aims o suppo con inuing ed- uca ion and li elong aining. The aim o he amewo k is no o p oduce all possible con en equi ed o implemen educa ional and aining p og ammes, bu ins ead o de ine guidelines and ools ha suppo he design o capabili y building ins umen s, open o ex e nal sou ces and hi d-pa y ma e ial ou side he conso ium, which in pa icula con ain guidelines and me hodologies o en- su e adequa e quali y s anda ds. This includes he iden i ica ion o cybe secu i y knowledge uni s and cu icula, he speci ica ion o lea ning objec i es and compe ences equi ed o de elop and enhance cybe secu i y skills o di e en p o iles and oles, he de- elopmen o aining and awa eness o achie e such objec i es and compe ences, oge he wi h ac i i ies o apply and es such compe- encies. Cybe secu i y is among he as es mo ing ields in oday’s digi al wo ld, which means ha educa ion p og ammes mus be con inuously upda ed wi h s a e-o - he-a esea ch and inno a ion knowledge o keep hem up- o-da e and ele an . Fo his pu pose, and as a o wa d- hinking ool o he Cybe Sec4Eu ope ame- wo k, he p ojec has p o ided communi y-eme gen sugges ions on how o inco po a e esea ch and demons a o s ( om Cybe - Sec4Eu ope) in o u u e educa ional o e s. Mo eo e , we explain how non- adi ional educa ion o ma s such as cybe anges, se i- ous games and MOOCs can be used o o e sui able cybe secu i y lea ning expe iences. O e all, he Cybe Sec4Eu ope p o ides an o e iew o e mos o he educa ion and aining ac i i ies which include cu a ed sum- ma ies o key con ibu ions, including ansla ions om his ame- wo k o he Eu opean Cybe secu i y Educa ion and P o essional T aining Minimum Re e ence Cu iculum (ECSO) occupa ions and skills s anda d, guidelines o de elop Secu i y Se ious Games (SSG) and o he gami ica ion app oaches o educa ion, s udies on job p o- iles o long p e alence in he cybe secu i y ield (bo de con ol), and incidence o cu en esea ch ini ia i es in o he knowledge a eas de ined in ou amewo k. 5 JOINT PROGRAMME DEVELOPMENT In he de elopmen o DJM-CYBER s udy p og am we made he ollowing s eps: (1) An analysis o exis ing cybe secu i y-o ien ed ERASMUS Mundus p og ammes. We analysed 5 exis ing ERASMUS Mundus s udy p og ammes in cybe secu i y conside ing he ollow- ing aspec s: 1) Selec ion o candida es, 2) Numbe o ECTS, 3) P og amme du a ion, 4) Tui ion ees and schola ships, 5) Summe schools and in e nships, 6) In ol ed coun ies, and o he s. (2) Compa ison and solu ion p oposal. The analysis is hen ol- lowed by a compa ison o he collec ed da a whe e ou p o- posed solu ions a e jus i ied. (3) Usage o exis ing in e na ional and Eu opean le el ecom- menda ions. In o de o s eng hen ou p oposal, documen s on cu icula ecommenda ions we e analysed. (4) Usage o exis ing ools, namely SPARTA Cu icula Designe and REWIRE Cybe secu i y P o ile . Bo h applica ions we e used in he selec ion o he cou ses o make ou p oposal i he desi ed NICE wo k oles and ENISA p o iles. (5) S uc u e o he p oposed s udy p og amme. A las , we p o- pose ou s udy p og am’s s uc u e. 5.1 Analysis o Exis ing P og ammes and Compa ison We iden i ied 5 mas e s cu en ly being implemen ed a he Eu o- pean le el: 1. Mas e ‘s P og amme in Secu i y and Cloud Compu ing (SECCLO), 2. Eu opean Mas e In Law, Da a and A i icial In elli- gence (EMILDAI), 3. Cybe space Beha io and E- he apy (CBE), 4. Cybe us E asmus Mundus Mas e in Cybe secu i y (CYBERUS), ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Danidou, e al. Table 1: Compa ison o exis ing cybe secu i y ERASMUS Mundus s udy p og ammes wi h ou p oposal, i.e., DJM-CYBER. "S/W" s a es o Summe o Win e . SECCLO EMILDAI CBE CYBERUS IMSISS DJM-CYBER ♯Uni e si ies 6 4 3 3 4 5 ♯Mobili y 2 2 o 3 3 3 3 2 o 3 ♯T acks 6 4 2 2 8 4 Facul ies Enginee ing and Compu e Science Law and Com- pu e Science Psychology Enginee ing and Compu e Science Social and Poli - ical Science Enginee ing and Compu e Science Topics Cloud compu - ing, in o ma- ion secu i y Law, compu - ing Human be- ha iou back- g ound, exac sciences, en- ginee ing backg ound IoT cybe secu- i y, so wa e cybe secu i y In elligence, peace-building and e o ism, causes o con- lic s 9 ENISA p o- iles In e nship Yes (5 ECTS) Yes (Elec i e) Yes Yes Yes (only o se- lec ed s uden s) Yes (Elec i e) ♯S/W School 1 3 1 1 4 1 5. In e na ional Mas e Secu i y, In elligence & S a egic S udies (IMSISS). Table 1 shows a compa ison o he i e mas e s and ou p oposal. Unluckily, he analysis poin ed ou ha he e is no common s a egy in he s uc u e o hese join mas e s. Fo example, he in ol ed acul ies and opics can be ei he echnical o humanis ic. SECCLO, EMILDAI, and CYBERUS a e o pa icula in e es since we a e going o p opose mo e “ echnical” opics due o ou expe ise. How- e e , i is impo an o no ice ha ou s udy p og amme will ocus on he mul idisciplina i y o cybe secu i y. In ac , DJM-CYBER p oposes 4 acks, and he s uden s will ecei e a double deg ee i le, mo e speci ically 4 di e en double deg ee p og ammes a e acc edi ed by a conso ium consis ing o i e uni e si ies. The numbe o isi ed uni e si ies will be ei he 2 o 3 in each p oposed ack. We would like o minimize he numbe o mobili ies o he s uden s ha need o adap o he new uni e si y en i on- men and coun y. We seek o achie e in e na ionaliza ion o hei knowledge and language no only ela ed o he cybe secu i y s udy. Howe e , each s uden should ha e he possibili y o ollow he ack ha he/she likes he mos , and he e o e, he op ion o 3 isi ed uni e si ies is equi ed o s uden s who al eady s udied a bachelo ’s deg ee in one o he in ol ed pa ne coun ies. Mo eo e , each exis ing s udy p og amme p esen s a di e en numbe o in ol ed uni e si ies. In some cases, hey ha e in ol ed associa ed pa ne s which ei he manage he summe /win e school o pa icipa e in he hesis de elopmen . The numbe o acks is also a ied. SECCLO s udy p og amme is he closes one due o he numbe o in ol ed uni e si ies. Following he exis ing p oposal, DJM-CYBER akes wo yea s o a o al o 120 ECTS. This allows s uden s o ha e a possible access o u u e Ph.D. s udy p og amme wi hou a need o any addi ional s udy. Mo eo e , each semes e will coun 30 ECTS as in all analysed p og ammes. The numbe c edi s assigned o he MSc hesis is 30 ECTS. The hesis is an impo an componen o he s udy p og amme which is compulso y in all analyzed join mas e s. We also seek o gi e o s uden s he possibili y o wo k independen ly while supe ised by an expe in he ield. Mos o he exis ing p og ammes assign he en i e las semes e o he hesis p epa a ion. No e ha he e is no common s a egy o he numbe o isi ed uni e si ies whe eas an in e nship is always included. 5.2 DJM-CYBER De elopmen and S uc u e Ou s udy p og amme DJM-CYBER consis s o 4 di e en acks ha co e 4 main cybe secu i y a eas: (1) T ack 1. Cybe secu i y Design and De elopmen , (2) T ack 2. In as uc u e Secu i y and Resilience, (3) T ack 3. Secu i y and Cybe In elligence, (4) T ack 4. Cybe secu i y Ope a ions and Managemen . All he acks ha e he same s a egy as shown in 1. Two uni- e si ies o he conso ium a e esponsible o e e y ack. I is planned ha s uden s will a end cou ses o a comple e yea in one uni e si y. This pe mi s a be e cul u al acquain ance and aca- demic in ol emen o he s uden in he hos ing coun y. Mo eo e , each s uden should ha e he possibili y o access he desi ed ack no depending on he coun y ha he/she s udied. Fo ins ance, s uden s who ha e a bachelo ’s deg ee om ei he he Czech Re- public o Cyp us can anyway selec T ack 1 wi h he limi a ion ha Semes e 4, he hesis de elopmen , will be done in collabo a ion be ween one o he wo HEIs in ol ed in he cu en ack and wi h one o he o he pa ne HEIs. Ou mas e ollows he ENISA ecommenda ions, and each ack is designed o co e 2 ENISA p o iles allowing a clea pa h om academia o wo k posi ions. Mo eo e , a na u al con inua ion is o become a Cybe secu i y Resea che in all cases. The connec ion be ween academia and p o iles is achie ed by selec ing cou ses o each pa ne wi h he ENISA key skills and knowledge desc ibed in he conside ed p o ile. Mo eo e , he NIST NICE wo k oles ela ed o he ack a e also p o ided. Each ack was designed using bo h he Cu icula Designe and he Cybe secu i y P o ile applica ions allowing, espec i ely, he mapping o NIST NICE amewo k and ENISA ECSF amewo ks. DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Figu e 1: S uc u e o DJM-CYBER s udy p og am. C edi s o he empla e o Slidesgo and F eepik. In case o T ack 1, a i s we ocus on cou ses co e ing hose REWIRE skills ha he Cybe secu i y A chi ec and Cybe secu- i y Implemen e p o iles ha e in common, i.e., "Da a Secu i y", "En e p ise A chi ec u e and In as uc u e Design", "In o ma ion Secu i y Con ols Assessmen ", "Ope a ing Sys ems", and "So wa e De elopmen ". Fo ins ance, "En e p ise A chi ec u e and In as- uc u e Design" is co e ed in "Cybe secu i y A chi ec u e and Ope a ions" (EUC) and "Mobile Ne wo k Communica ion Sys ems" (BUT) subjec s. Then we ied o each ou he emaining skills. The main REWIRE skills, allowing he co ela ion be ween cou ses and ENISA p o iles, o each subjec a e lis ed below in he acks desc ip ions. We e e o Sec ions 4.1 and 4.2 o mo e de ails on he ools. Acco dingly, ou DJM-CYBER mas e p o ides g adua es wi h a wide ange o ca ee oppo uni ies in a ious sec o s, such as go e nmen , inance, heal hca e, SMEs and echnology indus y. G adua es will be well-p epa ed o a leas he ollowing oles: Cy- be secu i y Implemen e ; Cybe secu i y A chi ec ; Cybe secu i y Resea che ; Digi al Fo ensics In es iga o ; Cybe Inciden Respon- de ; Cybe Th ea In elligence Specialis ; Cybe Legal, Policy & Compliance O ice ; Chie In o ma ion Secu i y O ice and Cybe - secu i y Risk Manage . We ecognize he impo ance o specializa ion in a mas e deg ee and, he e o e, elec i e cou ses a e p o ided whene e possible. Howe e , a s ong backg ound is also i al o co e he p o ile skills and knowledge. Acco dingly, elec i e cou ses can be added o he ack a e he basic knowledge is achie ed. Following he need o in eg a ion each uni e si y p o ides elec i e language cou ses. In e nships and summe schools a e no manda o y in his p og am. Bo h summe schools and in e nships a e bene icial o s uden s, hus hey will be inco po a ed in he u u e ei he by pa ne s o he p ojec o by associa ed pa ne s. Summe schools will be a ailable a he end o e e y academy yea and in e nships du ing he second yea o s udy. T ack 1. Cybe secu i y Design and De elopmen . This ack is join ly p o ided by he Eu opean Uni e si y Cyp us (EUC) and B no Uni e si y o Technology (BUT) uni e si ies. In he i s yea , s uden s en ich hei knowledge in cybe secu i y go e nance, e hi- cal hacking, and da a p o ec ion. In he second yea , c yp og aphy, IoT, and ne wo ks a e he main ocus o his ack. The cou ses a e in e connec ed o e he yea s. Fo ins ance, ollowing “Da a P i acy in he E a o Da a Mining and AI“ cou se, he s uden will be in oduced o da a p i acy om a legal and economic poin o iew whe eas wi h “Mode n C yp og aphy“ and “Pa allel Da a P ocessing“ cou ses hey will s udy he same opic in c yp og aphy- and machine lea ning-o ien ed way. Figu e 2 shows he le el o mul idisciplina i y in T ack 1. The SPARTA Cu icula Designe was deployed in he analysis. A las , T ack 1 passes he SPARTA p ac ical lec u e limi wi h a 64% sco e. Semes e 1 (EUC, 30 ECTS) consis s o h ee compulso y cou ses: • In oduc ion o Cybe secu i y (Comp., 10 ECTS) Main skill(s) acqui ed: Da a Secu i y. • Cybe secu i y Policy, Go e nance, Law and Compliance (Comp., 10 ECTS). Main skill(s) acqui ed: Policy De elop- men , and Law, Policy, and E hics skills. • Communica ions and Ne wo k Secu i y (Comp., 10 ECTS) Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y and Th ea Analysis. ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Danidou, e al. Figu e 2: Cu icula Designe analysis o T ack 1. Semes e 2 (EUC, 30 ECTS) includes wo compulso y cou ses (20 ECTS) and one elec i e cou se (10 ECTS) o choose among h ee possibili ies: • Cybe secu i y A chi ec u e and Ope a ions (Comp., 10 ECTS). Main skill(s) acqui ed: Risk Managemen , Tes ing and E al- ua ion, Inciden Managemen , En e p ise A chi ec u e and In as uc u e Design, and Da a Secu i y. • E hical Hacking and Pene a ion Tes ing (Comp., 10 ECTS). Main skill(s) acqui ed: Tes ing and E alua ion, and Law, Pol- icy, and E hics. • Da a P i acy in he E a o Da a Mining and AI (Elec ., 10 ECTS) This cou se has as main key skills: Da a P i acy, Da a Secu i y, and Da a Analysis. • Cybe secu i y Risk Analysis and Managemen (Elec ., 10 ECTS) Main skill(s) acqui ed: Risk Managemen , and Tes ing and E alua ion. • Inciden Response and Fo ensic Analysis (Elec ., 10 ECTS) Main skill(s) acqui ed: Inciden Managemen , and Digi al Fo ensics. Semes e 3 (BUT, 30 ECTS) consis s o i e compulso y cou ses (25 ECTS) and one elec i e cou se (5 ECTS) o choose among h ee possibili ies: • Mobile Ne wo k Communica ion Sys ems (Comp., 6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, En e p ise A chi ec u e and In as uc u e Design, and Ne wo k Managemen . • Founda ion o C yp og aphy (Comp., 6 ECTS). Main skill(s) acqui ed: Da a Secu i y, In o ma ion Sys ems and Ne wo k Secu i y, and Collabo a e and Communica e. • Mode n C yp og aphy (Comp., 6 ECTS). Main skill(s) ac- qui ed: Da a Secu i y, Da a P i acy, So wa e De elopmen , P oblem sol ing and C i ical Thinking. • Pa allel Da a P ocessing (Comp., 6 ECTS). Main skill(s) ac- qui ed: Da a Analysis, So wa e De elopmen , and In o ma- ion Sys ems and Ne wo k Secu i y. • Semes al Thesis (Comp., 1 ECTS). Main skill(s) acqui ed: So wa e De elopmen , P oblem sol ing and C i ical Think- ing, and Technology Fluency. • Da a S uc u es and Algo i hms (Elec . 5 ECTS). Main skill(s) acqui ed: Da a Analysis, and So wa e De elopmen . • Mode n Ne wo k Technologies (Elec ., 5 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, and Ne wo k Managemen . • Op ical Ne wo ks (Elec ., 5 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, and Ne wo k Managemen . Semes e 4 (BUT, 30 ECTS): Diploma Thesis (Comp., 30 ECTS). Main skill(s) acqui ed: So wa e De elopmen , P oblem sol ing and C i ical Thinking, and Technology Fluency. T ack 2. In as uc u e Secu i y and Resilience. This ack is join ly implemen ed by he Uni e si y o Mu cia (UMU) and Po- li ecnico di Milano (POLIMI). In he i s yea , s uden s en ich hei knowledge in cybe secu i y law and managemen , secu i y, p i- acy, e hical hacking and malwa e echnologies. In he second yea , s uden s ge acquain ed wi h da a science, neu al ne wo ks and deep lea ning, cybe c ime and compu e e hics. Figu e 3 shows he mul idisciplina i y assessmen o T ack 2 measu ed in he SPARTA Cu icula Designe . T ack 2 also passes he SPARTA limi o p ac i- cal lec u e achie ing a 79% o hem. Figu e 3: Cu icula Designe analysis o T ack 2. Semes e 1 consis s o 6 manda o y cou ses (UMU, 30 ECTS): • E hical Hacking (Comp., 6 ECTS). Main skill(s) acqui ed: Th ea Analysis, and Law, Policy, and E hics. • Techniques o he Managemen o he Cybe secu i y (Comp., 6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, Business Con inui y, Iden i y Manage- men , and Risk Managemen . • Cybe De ense (Comp., 6 ECTS). Main skill(s) acqui ed: In o - ma ion Sys ems and Ne wo k Secu i y, En e p ise A chi ec- u e and In as uc u e Design, and Inciden Managemen . DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly • Cybe secu i y and Communica ions (Comp., 6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, Inciden Managemen , and Ne wo k Managemen . • C yp og aphy (Comp., 3 ECTS). Main skill(s) acqui ed: Da a Secu i y. • Inno a ion and En ep eneu ship Semina (Comp., 3 ECTS). Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking, and Technology Fluency. Semes e 2 consis s o i e manda o y cou se and ou elec i e cou ses o choose om (UMU, 30 ECTS) : • Cybe Secu i y Lab (Comp., 6 ECTS). Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking, and Inciden Man- agemen . • 5G and IoT and Cybe -physical sys ems secu i y (Elec ., 6 ECTS). Main skill(s) acqui ed: Ne wo k Managemen , and Physical De ice Secu i y. • So wa e Secu i y & Secu e So wa e li ecycle (Comp., 3 ECTS). Main skill(s) acqui ed: So wa e De elopmen , Inci- den Managemen , and Da a Secu i y. • AAI Au hen ica ion and Au ho iza ion In as uc u es (Comp., 3 ECTS). Main skill(s) acqui ed: Iden i y Managemen , and En e p ise A chi ec u e and In as uc u e Design. • Ad anced Techniques in Cybe In elligence (Elec ., 6 ECTS). Main skill(s) acqui ed: In elligence Analysis. • Cybe secu i y and Law (Comp., 3 ECTS). Main skill(s) ac- qui ed: Da a P i acy, En e p ise A chi ec u e and In as uc- u e Design. • Dis ibu ed Sys ems Secu i y (Elec ., 3 ECTS). Main skill(s) acqui ed: In o ma ion Secu i y Con ols Assessmen . • Ha dwa e Secu i y (Elec ., 3 ECTS). Main skill(s) acqui ed: In o ma ion Secu i y Con ols Assessmen and Da a Secu- i y. • Malwa e & A ack Technologies (Comp., 3 ECTS). Main skill(s) acqui ed: Tes ing and E alua ion. Semes e 3 consis s o 2 manda o y cou ses and 6 elec i e cou ses o choose om (POLIMI, 30 ECTS): • O ensi e and De ensi e Cybe secu i y (Comp., 5 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y. • Da a Science and Secu i y o Mobili y (Elec ., 10 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, and Physical De ice Secu i y. • Resilience o C i ical In as uc u es (Elec ., 5 ECTS). Main skill(s) acqui ed: En e p ise A chi ec u e and In as uc u e Design. • C yp og aphy and A chi ec u es o Compu e Secu i y (Elec ., 5 ECTS). Main skill(s) acqui ed: Da a Secu i y, and En e p ise A chi ec u e and In as uc u e Design. • Digi al Fo ensics and Cybe c ime (Comp., 5 ECTS). Main skill(s) acqui ed: Digi al Fo ensics. • Sa e y in Au oma ion Sys ems (Elec ., 5 ECTS). Main skill(s) acqui ed: Th ea Analysis. • Compu e E hics (Elec ., 5 ECTS). Main skill(s) acqui ed: Law, Policy, and E hics. • A i icial Neu al Ne wo ks and Deep Lea ning (Elec ., 5 ECTS). Main skill(s) acqui ed: Da a Analysis. Semes e 4 (POLIMI, 30 ECTS): Thesis consul a ion (Comp., 30 ECTS). Main skill(s) acqui ed: So wa e De elopmen , P oblem sol - ing and C i ical Thinking, and Technology Fluency. T ack 3. Secu i y and Cybe In elligence. This ack is join ly p o- ided by he Uni e si y o Mu cia, Spain (UMU) and Eö ös Lo ánd Uni e si y, Hunga y (ELTE). In he i s yea , s uden s en ich hei knowledge in cybe secu i y law and managemen , secu i y, p i- acy, e hical hacking and malwa e echnologies. In he second yea , s uden s ocus on ad anced c yp og aphy, he secu i y aspec s o Machine Lea ning/A i icial In elligence (ML/AI), open-sou ce da a analysis echnologies and s eam mining, he eby acqui ing a b ead h o knowledge in a ious ele an opics in cybe secu i y and a mo e ocused skillse in secu i y da a analy ics necessa y o a leas he ollowing ENISA ECSF oles: Cybe Th ea In elligence Specialis ; Cybe Legal, Policy & Compliance O ice; and Cybe se- cu i y A chi ec . 4 shows he mul idisciplina i y sco e o T ack 3 measu ed wi h he SPARTA Cu icula Designe . T ack 3 also passes he SPARTA limi o p ac ical lec u es achie ing a 77% sco e. Figu e 4: Cu icula Designe analysis o T ack 3. Semes e 1 consis s o 6 manda o y cou ses (UMU, 30 ECTS): • E hical Hacking (Comp., 6 ECTS). Main skill(s) acqui ed: Th ea Analysis, and Law, Policy, and E hics. • Techniques o he Managemen o he Cybe secu i y (Comp., 6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, Business Con inui y, Iden i y Manage- men , and Risk Managemen . • Cybe De ense (Comp., 6 ECTS). Main skill(s) acqui ed: In o - ma ion Sys ems and Ne wo k Secu i y, En e p ise A chi ec- u e and In as uc u e Design, and Inciden Managemen . • Cybe secu i y and Communica ions (Comp., 6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, Inciden Managemen , and Ne wo k Managemen . • C yp og aphy (Comp., 3 ECTS). Main skill(s) acqui ed: Da a Secu i y. • Inno a ion and En ep eneu ship Semina (Comp., 3 ECTS). Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking, and Technology Fluency. ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Danidou, e al. Semes e 2 consis s o i e manda o y cou ses and ou elec i e cou ses o choose om (UMU, 30 ECTS): • Cybe Secu i y Lab (Comp., 6 ECTS). Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking, and Inciden Man- agemen . • 5G and IoT and Cybe -physical sys ems secu i y (Elec ., 6 ECTS). Main skill(s) acqui ed: Ne wo k Managemen , and Physical De ice Secu i y. • So wa e Secu i y & Secu e So wa e li ecycle (Comp., 3 ECTS). Main skill(s) acqui ed: So wa e De elopmen , Inci- den Managemen , and Da a Secu i y. • AAI Au hen ica ion and Au ho iza ion In as uc u es (Comp., 3 ECTS). Main skill(s) acqui ed: Iden i y Managemen , and En e p ise A chi ec u e and In as uc u e Design. • Ad anced Techniques in Cybe In elligence (Elec ., 6 ECTS). Main skill(s) acqui ed: In elligence Analysis. • Cybe secu i y and Law (Comp., 3 ECTS). Main skill(s) ac- qui ed: Da a P i acy, En e p ise A chi ec u e and In as uc- u e Design. • Ad anced aspec s o Cybe secu i y Managemen (Elec ., 3 ECTS). Main skill(s) acqui ed: Business con inui y, Th ea Analysis, and In elligence Analysis. • Human Fac o s and P i acy & Online Righ s (Elec ., 3 ECTS). Main skill(s) acqui ed: Law, Policy, and E hics. • Malwa e & A ack Technologies (Comp., 3 ECTS). Main skill(s) acqui ed: Tes ing and E alua ion. Semes e 3 consis s o one compulso y cou se and 6 elec i e cou ses o choose om (ELTE, 30 ECTS): • Cybe Secu i y Lab II (Comp., 6 ECTS). Main skill(s) acqui ed: Th ea Analysis, and In elligence Analysis. • Da a Science Lab II (Op ., 6 ECTS).Main skill(s) acqui ed: Da a Science and Analy ics, In o ma ion and Knowledge Managemen , Documen a ion P oduc ion. • Ad anced c yp og aphy (Elec ., 6 ECTS). Main skill(s) ac- qui ed: Da a Secu i y. • Da a Secu i y (Elec ., 6 ECTS). Main skill(s) acqui ed: Da a Secu i y, Da a P i acy, Da a Science and Analy ics, and In- elligence Analysis. • In oduc ion o Da a Science (Elec ., 6 ECTS). Main skill(s) acqui ed: Da a Science and Analy ics • Open-sou ce echnologies o eal- ime da a analy ics (Elec ., 6 ECTS). Main skill(s) acqui ed: En e p ise A chi ec u e and In as uc u e Design, Technology Fluency, Technology T end Moni o ing. • S eam mining (Elec ., 6 ECTS). Main skill(s) acqui ed: Th ea Analysis, and In elligence Analysis. Semes e 4 (ELTE, 30 ECTS): Thesis Consul a ion (Comp., 30 ECTS). Main skill(s) acqui ed: So wa e De elopmen , P oblem sol - ing and C i ical Thinking, and Technology Fluency. T ack 4. Cybe secu i y Ope a ions and Managemen . This ack is join ly implemen ed by he Uni e si y o Mu cia, Spain (UMU) and he Eu opean Uni e si y Cyp us (EUC). In he i s yea , s u- den s en ich hei knowledge in cybe secu i y law and manage- men , secu i y, p i acy, e hical hacking and malwa e echnologies. In he second yea , s uden s deepen hei knowledge in a ious aspec s o cybe secu i y (managemen , policy, law, o a chi ec u e). 5 shows he mul idisciplina i y assessmen o T ack 4 measu ed in he SPARTA Cu icula Designe . T ack 4 also passes he SPARTA limi o p ac ical lec u e achie ing a 55% sco e. Figu e 5: Cu icula Designe analysis o T ack 4. Semes e 1 consis s o 6 manda o y cou ses (UMU, 30 ECTS): • E hical Hacking (Comp., 6 ECTS). Main skill(s) acqui ed: Th ea Analysis, and Law, Policy, and E hics. • Techniques o he Managemen o he Cybe secu i y (Comp., 6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, Business Con inui y, Iden i y Manage- men , and Risk Managemen . • Cybe De ense (Comp., 6 ECTS). Main skill(s) acqui ed: In o - ma ion Sys ems and Ne wo k Secu i y, En e p ise A chi ec- u e and In as uc u e Design, and Inciden Managemen . • Cybe secu i y and Communica ions (Comp., 6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, Inciden Managemen , and Ne wo k Managemen . • C yp og aphy (Comp., 3 ECTS). Main skill(s) acqui ed: Da a Secu i y. • Inno a ion and En ep eneu ship Semina (Comp., 3 ECTS). Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking, and Technology Fluency. Semes e 2 consis s o one manda o y cou se and 10 elec i e cou ses o choose om (UMU, 30 ECTS): • Cybe Secu i y Lab (Comp., 6 ECTS). Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking, and Inciden Man- agemen . • 5G and IoT and Cybe -physical sys ems secu i y (Elec ., 6 ECTS). Main skill(s) acqui ed: Ne wo k Managemen , and Physical De ice Secu i y. • So wa e Secu i y & Secu e So wa e li ecycle (Comp., 3 ECTS). Main skill(s) acqui ed: So wa e De elopmen , Inci- den Managemen , and Da a Secu i y. • AAI Au hen ica ion and Au ho iza ion In as uc u es (Comp., 3 ECTS). Main skill(s) acqui ed: Iden i y Managemen , and En e p ise A chi ec u e and In as uc u e Design. DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly • Ad anced Techniques in Cybe In elligence (Elec ., 6 ECTS). Main skill(s) acqui ed: In elligence Analysis. • Cybe secu i y and Law (Comp., 3 ECTS). Main skill(s) ac- qui ed: Da a P i acy, En e p ise A chi ec u e and In as uc- u e Design. • Ad anced aspec s o Cybe secu i y Managemen (Elec ., 3 ECTS). Main skill(s) acqui ed: Business con inui y, Th ea Analysis, and In elligence Analysis • Dis ibu ed Sys ems Secu i y (Elec ., 3 ECTS). Main skill(s) acqui ed: In o ma ion Secu i y Con ols Assessmen . • Ha dwa e Secu i y (Elec ., 3 ECTS). Main skill(s) acqui ed: In o ma ion Secu i y Con ols Assessmen and Da a Secu- i y. • Human Fac o s and P i acy & Online Righ s (Elec ., 3 ECTS). Main skill(s) acqui ed: Law, Policy, and E hics. • Malwa e & A ack Technologies (Elec ., 3 ECTS). Main skill(s) acqui ed: Tes ing and E alua ion. Semes e 3 consis s o h ee manda o y cou ses (EUC, 30 ECTS): • Cybe secu i y A chi ec u e & Ope a ions (Comp., 10 ECTS). Main skill(s) acqui ed: Risk Managemen , Tes ing and E al- ua ion, Inciden Managemen , En e p ise A chi ec u e and In as uc u e Design, and Da a Secu i y. • Cybe secu i y Policy, Go e nance, Law and Compliance (Comp., 10 ECTS). Main skill(s) acqui ed: Policy De elop- men , and Law, Policy, and E hics skills. • Cybe secu i y Risk Analysis and Managemen (Comp., 10 ECTS). Main skill(s) acqui ed: Risk Managemen , and Tes ing and E alua ion. Semes e 4 (EUC, 30 ECTS): Thesis (Comp., 30 ECTS). Main skill(s) acqui ed: So wa e De elopmen , P oblem sol ing and C i ical Thinking, and Technology Fluency. 6 CONCLUSIONS I is a well-known ac ha he wo ldwide wo k o ce gap in cy- be secu i y is measu ed in millions o missing expe s. Tackling his challenge is no an easy ask. One signi ican aspec o he mix u e o app oaches a e highly ailo ed, no el s udy p og ammes o e ed ei he by single uni e si ies o join p og ammes p o ided by highe educa ion conso ia consis ing o mul iple uni e si ies and/o colleges. Ensu ing ha any new s udy p og amme will mee he equi emen s o he job ma ke is i sel a daun ing ask, which is o una ely made easie ia publicly a ailable skills amewo ks like he ENISA’s Eu opean Cybe secu i y F amewo k (ECSF) o he Na ional Ins i u e o Science and Technology’s (NIST) NICE Compe encies F amewo k. The goal o his pape was o desc ibe a me hodology allowing single uni e si ies o highe educa ion conso ia o selec he bes eely a ailable ools which migh aid hem in he design and con- inuous de elopmen o no el cybe secu i y s udy p og ammes. We desc ibed he mos ele an EU-le el p ojec s and he aluable ools de eloped by hem. We also ouched he mos ele an skills ame- wo ks, namely by desc ibing he abo e-men ioned ECSF and NICE CF. Finally, we u ilized he p esen ed se o ools and amewo ks o design and assess a join mas e -le el s udy p og amme de eloped by a conso ium o i e Eu opean uni e si ies and s uc u ed in o ou ma kedly di e en s udy acks. We measu ed he co e age o he mos ele an skills and sco ed he acks’ p ac icali y. Ou p oposal p o ides a clea and ecognized ecosys em consis - ing o ools and amewo k o he de elopmen o cybe secu i y compe encies and skills, ensu ing ha g adua es a e well-equipped o mee he demands o he cybe secu i y wo k o ce in Eu ope and beyond. I also p o ide a common language and e e ence poin o employe s, educa o s, and s uden s, acili a ing communica ion, s anda diza ion, and consis ency in cybe secu i y educa ion and aining ac oss Eu ope. ACKNOWLEDGMENTS The ollowing unding sou ces a e g a e ully acknowledged: he ERASMUS+ E asmus Mundus Design Measu es (EMDM) p og amme o he Eu opean Union (g an 1701-EPP-1-2020-1-LT-EPPKA2-SSA- B ’DJM-CYBER’), he ERASMUS+ Sec o Skills Alliance (SSA) p o- g amme o he Eu opean Union (g an 621701-EPP-1-2020-1-LT- EPPKA2-SSA-B ’REWIRE’), and P ojec no. TKP2021-NVA-29 which has been implemen ed wi h he suppo p o ided by he Minis y o Cul u e and Inno a ion o Hunga y om he Na ional Resea ch, De- elopmen and Inno a ion Fund, inanced unde he TKP2021-NVA unding scheme. REFERENCES [1] Bo ka Je man Blažič. 2021. The cybe secu i y labou sho age in Eu ope: Mo ing o a new concep o educa ion and aining. Technology in Socie y 67 (2021), 101769. h ps://doi.o g/10.1016/j. echsoc.2021.101769 [2] Se gey B a us, I án A ce, Michael E. Locas o, and S e ano Zane o. 2014. Why O ensi e Secu i y Needs Enginee ing Tex books: O , How o A oid a Replay o "C yp o Wa s" in Secu i y Resea ch. login Usenix Mag. 39, 4 (2014). h ps: //www.usenix.o g/publica ions/login/augus 14/b a us [3] CONCORDIA. 2022. Teach- he-Teache s in high-school. Me hodology and Guide- lines. (2022). h ps://www.conco dia-h2020.eu/wp-con en /uploads/2022/11/ Teach- he-Teache sMe hodology- o -publica ion.pd [4] Cybe Sec4Eu ope. 2023. Final Educa ional and Assessmen F amewo k (Cybe - Sec4Eu ope). h ps://cybe sec4eu ope.eu/wp-con en /uploads/2022/07/D6.6- Final-Educa ional-and-Assessmen -F amewo k_submi ed.pd [5] Pe Dzu enda and Sa a Ricci. 2022. R3.4.1 Mapping he amewo k o exis ing cou ses and schemes. h ps:// ewi ep ojec .eu/wp-con en /uploads/2023/03/ REWIRE_R3.4.1_Deli e able- 8-Final-EC-Check.pd [6] ENISA. 2022. Eu opean Cybe secu i y Skills F amewo k Role P o- iles. h ps://www.enisa.eu opa.eu/publica ions/eu opean-cybe secu i y-skills- amewo k- ole-p o iles [7] CSEC2017 Join Task Fo ce. 2017. Cybe secu i y Cu icula 2017 — Cu iculum Guidelines o Pos -Seconda y Deg ee P og ams in Cybe secu i y. Re ie ed om Associa ion o Compu ing Machine y: h ps://www.acm.o g/bina ies/con en / asse s/educa ion/cu icula- ecommenda ions/csec2017.pd . [8] Jan Hajny. 2020. D9.2 Cu icula desc ip ions. h ps://www.spa a.eu/asse s/ deli e ables/SPARTA-D9.2-Cu icula-desc ip ions-PU-M18.pd [9] Jan Hajny, Sa a Ricci, Edmundas Piesa skas, and Ma ek Siko a. 2021. Cybe - secu i y Cu icula Designe . In P oceedings o he 16 h In e na ional Con e - ence on A ailabili y, Reliabili y and Secu i y (Vienna, Aus ia) (ARES 21). As- socia ion o Compu ing Machine y, New Yo k, NY, USA, A icle 144, 7 pages. h ps://doi.o g/10.1145/3465481.3469183 [10] Jan Hajny, Ma ek Siko a, A hanasios Vasileios G amma opoulos, and Fabio Di F anco. 2022. Adding Eu opean Cybe secu i y Skills F amewo k in o Cu ic- ula Designe . In P oceedings o he 17 h In e na ional Con e ence on A ailabili y, Reliabili y and Secu i y (Vienna, Aus ia) (ARES ’22). Associa ion o Compu ing Machine y, New Yo k, NY, USA, A icle 82, 6 pages. h ps://doi.o g/10.1145/ 3538969.3543799 [11] Igo Nai Fo ino, Rica do Neisse, Juan He nandez Ramos, Nicole a Polemi, Gian- Luca Ruzzan e, Ma kus Figwe , and Alessand o Laza i. 2019. A P oposal o a Eu opean Cybe secu i y Taxonomy. Re ie ed om EUROPA - Eu opean Union websi e, he o icial EU websi e: h ps://publica ions.j c.ec.eu opa.eu/ eposi o y/ bi s eam/JRC118089/ axonomy- 2.pd . [12] Rodney Pe e sen, Danielle San os, Ma hew C. Smi h, Ka en A. We zel, and G eg Wi e. 2020. NIST Special Publica ion 800-181 Re ision 1: Wo k o ce F amewo k o Cybe secu i y (NICE F amewo k). a ailable online a h ps://n lpubs.nis .go /