scieee Science in your language
[en] (orig)

DJM-CYBER: A Joint Master in Advanced Cybersecurity

Abstract

Various publicly available studies show that millions of cybersecurity experts are missing worldwide. One possible way to tackle the workforce gap is with tailored higher education programmes. The goal of this paper is to present the relevant projects and frameworks of the European Union which can guide the development of novel cybersecurity education offerings. We describe the most relevant and freely available tools and test them in the development of a joint Master study programme to be offered by a consortium of five European universities. We show that these tools allow educators and study programme developers to map their outputs to the European Cybersecurity Framework developed by the ENISA and other similar frameworks. We complete our work with a detailed analysis of a joint cybersecurity master programme consisting of four innovative and distinctly different tracks.

Read accessible full text

DJM-CYBER: A Joint Master in Advanced Cybersecurity

Author: Danidou, Yianna; Ricci, Sara; Skarmeta, Antonio; Hošek, Jiří; Zanero, Stefano; Lendak, Imre
Publisher: ACM
Year: 2023
DOI: 10.1145/3600160.3605002
Source: https://dspace.vut.cz/bitstreams/93111036-99ff-4f24-b178-1cd28d2fd1d5/download
DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y
Yianna Danidou∗
y[email p o ec ed]
Eu opean Uni e si y Cyp us
Nicosia, Cyp us
Sa a Ricci
[email p o ec ed]
B no Uni e si y o Technology
B no, Czech Republic
An onio Ska me a
[email p o ec ed]
Uni e sidad de Mu cia
Mu cia, Spain
Im e Lendak
Eö ös Lo ánd Uni e si y (ELTE)
Budapes , Hunga y
[email p o ec ed]
Ji i Hosek
[email p o ec ed]
B no Uni e si y o Technology
B no, Czech Republic
S e ano Zane o
s e ano.zane [email p o ec ed]
Poli ecnico di Milano
Milano, I aly
ABSTRACT
Va ious publicly a ailable s udies show ha millions o cybe secu-
i y expe s a e missing wo ldwide. One possible way o ackle he
wo k o ce gap is wi h ailo ed highe educa ion p og ammes. The
goal o his pape is o p esen he ele an p ojec s and amewo ks
o he Eu opean Union which can guide he de elopmen o no el
cybe secu i y educa ion o e ings. We desc ibe he mos ele an
and eely a ailable ools and es hem in he de elopmen o a
join Mas e s udy p og amme o be o e ed by a conso ium o
i e Eu opean uni e si ies. We show ha hese ools allow educa-
o s and s udy p og amme de elope s o map hei ou pu s o he
Eu opean Cybe secu i y F amewo k de eloped by he ENISA and
o he simila amewo ks. We comple e ou wo k wi h a de ailed
analysis o a join cybe secu i y mas e p og amme consis ing o
ou inno a i e and dis inc ly di e en acks.
CCS CONCEPTS
•Social and p o essional opics
→
Model cu icula;•Applied
compu ing
→
Educa ion;•Human-cen e ed compu ing
→
Human compu e in e ac ion (HCI).
KEYWORDS
cybe secu i y educa ion, join mas e p og amme, cybe secu i y
oles, cybe secu i y p o iles, ENISA ECSF, NICE F amewo k
ACM Re e ence Fo ma :
Yianna Danidou, Sa a Ricci, An onio Ska me a, Im e Lendak, Ji i Hosek,
and S e ano Zane o. 2023. DJM-CYBER: A Join Mas e in Ad anced Cybe -
secu i y. In The 18 h In e na ional Con e ence on A ailabili y, Reliabili y and
Secu i y (ARES 2023), Augus 29–Sep embe 01, 2023, Bene en o, I aly. ACM,
New Yo k, NY, USA, 10 pages. h ps://doi.o g/10.1145/3600160.3605002
1 INTRODUCTION
In oday’s digi al landscape, cybe secu i y has eme ged as a c i ical
and p essing opic, gi en he g owing eliance o public and p i a e
o ganisa ions as well as indi iduals on echnology o hei day-
o-day ope a ions and communica ion. Howe e , he demand o
This wo k is licensed unde a C ea i e Commons A ibu ion In e na ional
4.0 License.
ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly
©2023 Copy igh held by he owne /au ho (s).
ACM ISBN 979-8-4007-0772-8/23/08.
h ps://doi.o g/10.1145/3600160.3605002
cybe secu i y expe ise o en su passes he a ailabili y o skilled
p o essionals who can implemen and main ain e ec i e cybe se-
cu i y measu es. As a esul , his skill gap poses ulne abili ies and
isks, wi h po en ial consequences o indi iduals, businesses, and
e en na ions.
Eu ope has been pa icula ly a ec ed by he sho age o cybe se-
cu i y expe s, as he demand o hese skills has inc eased apidly
in ecen yea s, leading o a signi ican skills gap in he ield. The
complex and e e -e ol ing na u e o cybe secu i y necessi a es
ongoing aining and educa ion, making i challenging o iden i y,
add ess, and upda e he equi ed secu i y skills [
1
,
2
]. To add ess
his issue, companies, go e nmen s, and academia ha e de ined cy-
be secu i y p o iles and ela ed skills in an ad-hoc manne , esul ing
in di e se de ini ions o he same equi emen s. The e o e, he e
is a need o s anda dize hese p o iles and skills o align wi h he
Eu opean pe spec i e, in o de o de elop mo e e icien aining
p og ams ha can mee he cu en and u u e aining needs. A
no able ou come o hese e o s is he Eu opean Union Agency o
Cybe secu i y’s (ENISA) Eu opean Cybe secu i y Skills F amewo k
(ECSF) [
6
], which has success ully ede ined and consolida ed cy-
be secu i y p o iles in o 12 comp ehensi e p o iles ha encompass
all necessa y cu en skills, wi h p o isions o u u e skill upda es.
The sho age o cybe secu i y expe s con inues o be a pe sis-
en challenge, and he demand is expec ed o su pass he supply
in he o eseeable u u e. This unde sco es he ongoing need o
sus ained in es men in educa ion and aining p og ams, as well
as he p omo ion o cybe secu i y as a iable and ewa ding ca ee
pa h o a ac mo e alen o he ield. Ac oss Eu ope, he e a e
se e al ini ia i es ha emphasize he impo ance o cybe secu i y
om an ea ly age, aiming o gene a e inc eased in e es among
young people in pu suing a ca ee in cybe secu i y in he u u e
[
3
]. P o iding comp ehensi e and engaging guidance o eache s
a he basic educa ion le els is c ucial, wi h con en ha no only
os e s cu iosi y and in e es in he cybe secu i y ield bu also
aises awa eness abou cybe secu i y and unde sco es he demand
o expe s in his sec o .
2 IMPACT OF THE PROGRAMME
In esponse o he skills gap, Eu opean go e nmen s and businesses
a e in es ing in educa ion and aining p og ams o cul i a e he
nex gene a ion o expe s. One such Eu opean in es men is he
E asmus Mundus ini ia i e which leads o Highe Educa ion ins i u-
ions (HEIs) o collabo a e and join ly o e specialized Mas e -le el
s udy p og ams. E asmus Mundus Join Mas e (EMJM) p ojec s
ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Danidou, e al.
can ecei e EU unding and be implemen ed by ma u e conso ia in
a single s age, o conso ia can be se up wi h he E asmus Mundus
Design Measu es lump-sum unding ins umen o he EU. The
Designing a Join Mas e in Cybe secu i y (DJM-CYBER) was an
EMDM p ojec which aimed o design and de elop a Join Mas e in
Ad anced Cybe secu i y p og amme. In o de o ensu e he e ec-
i eness and ele ance o he p oposed cu iculum, he conso ium
p io i ized academic educa ion o ma ch he p o iles iden i ied in
ENISA’s ECSF and he NIST NICE Compe encies amewo k.
The design and e en ual es ablishmen o he Join Mas e ’s
in Ad anced Cybe secu i y can ha e a signi ican impac by en-
hancing educa ion and aining by p o iding a comp ehensi e and
specialised cu iculum, in e disciplina y, cu ing-edge esea ch and
p ac ical aining; c ea ing a pool o di e se and highly skilled
p o essionals, while a ac ing op alen s om ac oss Eu ope and
beyond; imp o ing cybe secu i y p ac ices and s anda ds aising
he o e all cybe secu i y pos u e in Eu ope; os e ing collabo a i e
esea ch and inno a ion among s uden s, acul y, and esea che s
om di e en coun ies and ins i u ions, leading o he exchange o
ideas, no el esea ch indings, and inno a i e solu ions; s eng h-
ening he Eu opean cybe secu i y ecosys em by acili a ing pa -
ne ships be ween academia, indus y, and go e nmen , leading o
inc eased collabo a ion, in o ma ion sha ing, and join ini ia i es
in cybe secu i y esea ch, de elopmen , and policy-making; and
add essing he skills gap in he ield by p oducing highly ained
g adua es wi h specialized expe ise. G adua es o he p og am
would possess ad anced quali ica ions ecognized ac oss Eu ope,
making hem highly compe i i e in he job ma ke and capable o
mee ing he inc easing demand o skilled cybe secu i y expe s.
3 CYBERSECURITY ROLES AND PROFILES
In his sec ion, we b ie ly e iew he NIST NICE Compe encies
amewo k and he ENISA Eu opean Cybe secu i y Skills F ame-
wo k Role P o iles (ECSF). The conso ium has aligned he cu icu-
lum o he ( u u e) Join Mas e ’s P og amme wi h bo h axonomies
o ensu e ha g adua es will possess he necessa y knowledge,
skills and abili ies ha a e in cu en demand in he cybe secu i y
wo k o ce as well as in he u u e, making hem mo e compe i i e
and ele an in he job ma ke , and helping o close he skills gap.
3.1 NIST NICE wo k oles
The Na ional Ini ia i e o Cybe secu i y Educa ion (NICE) is a
Uni ed S a es pa ne ship be ween go e nmen , academia and he
p i a e sec o led by he Na ional Ins i u e o S anda ds and Tech-
nology (NIST). I suppo s cybe secu i y aining and educa ion
p o ide s by de eloping axonomies, s anda ds, and bes p ac ices.
Among he c ea ed s anda ds, he NICE F amewo k [
12
] p o ides a
de ailed desc ip ion o 1) wo k oles, 2) knowledge, skills, and abili-
ies (KSAs), and 3) asks o a o emen ioned wo k oles. Acco dingly,
his amewo k iden i ies which knowledge and skills a e equi ed
by pa icula wo k oles a ailable in he cybe secu i y job ma ke .
3.2 ENISA Cybe secu i y Skills F amewo k -
ECSF
The ENISA Eu opean Cybe secu i y Skills F amewo k (ECSF) [
6
]
is he esul o he join e o s o ENISA and he ENISA ad-hoc
wo king g oup on cybe secu i y skills amewo k. The ECSF aims
o c ea e "a common unde s anding o he ele an oles, compe-
encies, skills and knowledge in o de o acili a e cybe secu i y
skills ecogni ion and o suppo he design o cybe secu i y- ela ed
aining p og ams". The amewo k summa izes all cybe secu i y-
ela ed oles in o 12 p o iles, wi h clea ly ou lined ela ed key asks,
skills, knowledge, and compe encies. I is impo an o no ice ha
he ECSF coun s a o al o 84 key skills and 69 key knowledge a eas
de ined. This lis o key skills and knowledge c ea e a common ax-
onomy o academia, i.e., hey speci y which knowledge a e needed
o be augh . The 12 ECSF p o iles a e as ollows: Chie In o ma ion
Secu i y O ice (CISO), Cybe Inciden Responde , Cybe Legal,
Policy & Compliance O ice , Cybe Th ea In elligence Special-
is , Cybe secu i y A chi ec , Cybe secu i y Audi o , Cybe secu i y
Educa o , Cybe secu i y Implemen e , Cybe secu i y Resea che ,
Cybe secu i y Risk Manage , Digi al Fo ensics In es iga o , and
Pene a ion Tes e .
4 RELATED CYBERSECURITY EDUCATION
PROJECTS
Se e al cybe secu i y amewo ks ha e been de eloped o e he
las i e yea s (2017- 2022), aimed a p o iding sui able e e ence
s uc u es o di e en pu poses: academic educa ion, p o essional
aining, and scien i ic and echnological esea ch. We men ion
in pa icula he ollowing amewo ks, due o he b oadness o
hei scope and he well-es ablished in e na ional ins i u ions ha
p oduced hem:
•The Cybe secu i y Cu icula Guidelines (CSEC) [7]
•The Cybe secu i y Wo k o ce F amewo k (CWF) [12]
•The Eu opean Cybe secu i y Taxonomy (JRC) [11]
•The Cybe secu i y Body o Knowledge (CyBOK) [13]
•
The Eu opean Cybe secu i y Educa ion and P o essional
T aining Minimum Re e ence Cu iculum (ECSO) [16]
Ou conso ium was composed o pa ne s in ol ed in wo (o e
ou ) pilo p ojec s namely Cybe Sec4Eu ope and SPARTA, which
we e chosen o add ess he Ho izon 2020 Cybe secu i y call and a e
pa o he Eu opean Cybe secu i y Compe ence Ne wo k which
aims o s eng hen and sus ain Eu ope’s cybe secu i y compe ence
whe e he pilo s collabo a i ely sha e hei achie emen s and e-
sul s. Mo eo e , wo membe s o ou pa ne ship a e pa o he
Cybe secu i y Skills Alliance – A New Vision o Eu ope (REWIRE)
ERASMUS+ Sec o Skills Alliance (SSA) p ojec , which “aims o p o-
ide conc e e ecommenda ions and solu ions ha would lead o he
educ ion o skill gaps be ween indus y equi emen s and sec o al
aining p o ision and con ibu e o suppo g ow h, inno a ion
and compe i i eness in he ield o Cybe secu i y” [14].
4.1 SPARTA - Cu icula Designe
SPARTA is a p ojec which c ea ed a long-las ing communi y capa-
ble o collabo a ion o de ine, de elop, sha e, and e ol e solu ions
ha will help p ac i ione s p e en cybe c ime and enhance cybe -
secu i y. SPARTA Deli e able D9.2 [
8
] con ains he desc ip ion o
he me hodology o designing highe educa ion s udy p og ams
and p o essional aining cou ses, speci ically ecommends ha a
Mas e ’s deg ee should ha e a leas 40 % o p ac ical lec u es.
DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly
Wi hin he SPARTA p ojec , a no el ee web applica ion, namely
he Cybe secu i y Cu icula Designe [
9
], was de eloped. This app
can be used o design cybe secu i y cu icula ha e lec he needs
o pa icula wo k posi ions. The applica ion uses he SPARTA
amewo k ha is de i ed om he NIST NICE amewo k. In pa -
icula , h ough he inse ion mechanism, he gene a ed cu icula
can be analyzed and mapped o he NICE NIST wo k oles.
Mo eo e , he applica ion was ex ended o wo k wi h he key
skills o he ENISA amewo k and, he e o e, maps he added
cu iculum o he ENISA amewo k [10].
4.2 REWIRE - Cybe secu i y P o ile
Wi hin he analysis o he ENISA ECSF amewo k, he REWIRE
p ojec ound ha he ENISA key skills and knowledge desc ibing
he p o iles a e uniquely ph ased [
5
]. Mo eo e , his lis equi es
echnical knowledge and can be demanding o be managed o non-
expe s o he sec o . A way o o e come his issue is o g oup he
key knowledge and skills ha ep esen he exac same concep s
bu ph ased in di e en ways. Acco dingly, a o al o 31 g oups
we e iden i ied and used as back-end o he de eloped use - iendly
REWIRE web applica ions, i.e. he Cybe secu i y P o ile [
5
] and
Cybe secu i y Job Ads analyze [15].
The REWIRE Cybe secu i y P o ile is an open-sou ce, eely
a ailable, dynamic web applica ion which allows he design and
he analysis o cu icula. In pa icula , he Cybe secu i y P o ile 1)
maps exis ing cu icula, ainings, and ce i ica ions o he ENISA
p o iles, 2) iden i ies which cou ses, ainings, and ce i ica ions a e
ecommended o a ce ain p o ile, and 3) allows designing a s udy
p og am, aining, o ce i ica ion scheme and seeing o which p o-
ile is mo e ela ed. This applica ion is an ex en ion o he SPARTA
Cu icula Designe o which i sha es he main ea u es. While he
Cu icula Designe is in ended only o cu icula, he Cybe secu i y
P o ile also inco po a es he design o p o essional aining and
ce i ica ion schemes. In he Cybe secu i y P o ile , he cu icula
a e mapped o he ENISA p o ile h ough he 31 REWIRE g oup. Fo
ins ance, he ollowing g oups/skills belong o he Cybe secu i y
A chi ec p o ile: "Collabo a e and Communica e", "Da a P i acy",
"Da a Secu i y", "En e p ise A chi ec u e and In as uc u e De-
sign", "In o ma ion Secu i y Con ols Assessmen ", "Law, Policy,
and E hics", "Ope a ing Sys ems", "Risk Managemen ", "So wa e De-
elopmen ", "Technology Fluency", and "Wo k o ce Managemen ".
We e e o [5] o mo e de ails.
4.3 Cybe Sec4Eu ope
One o he cen al aspec s o he Cybe Sec4Eu ope cybe secu i y
pilo p ojec was he iden i ica ion o an educa ion and assessmen
amewo k desc ibed in [
4
], which aims o suppo con inuing ed-
uca ion and li elong aining. The aim o he amewo k is no o
p oduce all possible con en equi ed o implemen educa ional and
aining p og ammes, bu ins ead o de ine guidelines and ools
ha suppo he design o capabili y building ins umen s, open o
ex e nal sou ces and hi d-pa y ma e ial ou side he conso ium,
which in pa icula con ain guidelines and me hodologies o en-
su e adequa e quali y s anda ds. This includes he iden i ica ion
o cybe secu i y knowledge uni s and cu icula, he speci ica ion
o lea ning objec i es and compe ences equi ed o de elop and
enhance cybe secu i y skills o di e en p o iles and oles, he de-
elopmen o aining and awa eness o achie e such objec i es and
compe ences, oge he wi h ac i i ies o apply and es such compe-
encies. Cybe secu i y is among he as es mo ing ields in oday’s
digi al wo ld, which means ha educa ion p og ammes mus be
con inuously upda ed wi h s a e-o - he-a esea ch and inno a ion
knowledge o keep hem up- o-da e and ele an . Fo his pu pose,
and as a o wa d- hinking ool o he Cybe Sec4Eu ope ame-
wo k, he p ojec has p o ided communi y-eme gen sugges ions
on how o inco po a e esea ch and demons a o s ( om Cybe -
Sec4Eu ope) in o u u e educa ional o e s. Mo eo e , we explain
how non- adi ional educa ion o ma s such as cybe anges, se i-
ous games and MOOCs can be used o o e sui able cybe secu i y
lea ning expe iences.
O e all, he Cybe Sec4Eu ope p o ides an o e iew o e mos
o he educa ion and aining ac i i ies which include cu a ed sum-
ma ies o key con ibu ions, including ansla ions om his ame-
wo k o he Eu opean Cybe secu i y Educa ion and P o essional
T aining Minimum Re e ence Cu iculum (ECSO) occupa ions and
skills s anda d, guidelines o de elop Secu i y Se ious Games (SSG)
and o he gami ica ion app oaches o educa ion, s udies on job p o-
iles o long p e alence in he cybe secu i y ield (bo de con ol),
and incidence o cu en esea ch ini ia i es in o he knowledge
a eas de ined in ou amewo k.
5 JOINT PROGRAMME DEVELOPMENT
In he de elopmen o DJM-CYBER s udy p og am we made he
ollowing s eps:
(1)
An analysis o exis ing cybe secu i y-o ien ed ERASMUS Mundus
p og ammes. We analysed 5 exis ing ERASMUS Mundus
s udy p og ammes in cybe secu i y conside ing he ollow-
ing aspec s: 1) Selec ion o candida es, 2) Numbe o ECTS,
3) P og amme du a ion, 4) Tui ion ees and schola ships, 5)
Summe schools and in e nships, 6) In ol ed coun ies, and
o he s.
(2)
Compa ison and solu ion p oposal. The analysis is hen ol-
lowed by a compa ison o he collec ed da a whe e ou p o-
posed solu ions a e jus i ied.
(3)
Usage o exis ing in e na ional and Eu opean le el ecom-
menda ions. In o de o s eng hen ou p oposal, documen s
on cu icula ecommenda ions we e analysed.
(4)
Usage o exis ing ools, namely SPARTA Cu icula Designe
and REWIRE Cybe secu i y P o ile . Bo h applica ions we e
used in he selec ion o he cou ses o make ou p oposal i
he desi ed NICE wo k oles and ENISA p o iles.
(5)
S uc u e o he p oposed s udy p og amme. A las , we p o-
pose ou s udy p og am’s s uc u e.
5.1 Analysis o Exis ing P og ammes and
Compa ison
We iden i ied 5 mas e s cu en ly being implemen ed a he Eu o-
pean le el: 1. Mas e ‘s P og amme in Secu i y and Cloud Compu ing
(SECCLO), 2. Eu opean Mas e In Law, Da a and A i icial In elli-
gence (EMILDAI), 3. Cybe space Beha io and E- he apy (CBE),
4. Cybe us E asmus Mundus Mas e in Cybe secu i y (CYBERUS),
ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Danidou, e al.
Table 1: Compa ison o exis ing cybe secu i y ERASMUS Mundus s udy p og ammes wi h ou p oposal, i.e., DJM-CYBER.
"S/W" s a es o Summe o Win e .
SECCLO EMILDAI CBE CYBERUS IMSISS DJM-CYBER
♯Uni e si ies 6 4 3 3 4 5
♯Mobili y 2 2 o 3 3 3 3 2 o 3
♯T acks 6 4 2 2 8 4
Facul ies
Enginee ing
and Compu e
Science
Law and Com-
pu e Science
Psychology
Enginee ing
and Compu e
Science
Social and Poli -
ical Science
Enginee ing
and Compu e
Science
Topics
Cloud compu -
ing, in o ma-
ion secu i y
Law, compu -
ing
Human be-
ha iou back-
g ound, exac
sciences, en-
ginee ing
backg ound
IoT cybe secu-
i y, so wa e
cybe secu i y
In elligence,
peace-building
and e o ism,
causes o con-
lic s
9 ENISA p o-
iles
In e nship Yes (5 ECTS) Yes (Elec i e) Yes Yes
Yes (only o se-
lec ed s uden s)
Yes (Elec i e)
♯S/W School 1 3 1 1 4 1
5. In e na ional Mas e Secu i y, In elligence & S a egic S udies
(IMSISS).
Table 1 shows a compa ison o he i e mas e s and ou p oposal.
Unluckily, he analysis poin ed ou ha he e is no common s a egy
in he s uc u e o hese join mas e s. Fo example, he in ol ed
acul ies and opics can be ei he echnical o humanis ic. SECCLO,
EMILDAI, and CYBERUS a e o pa icula in e es since we a e
going o p opose mo e “ echnical” opics due o ou expe ise. How-
e e , i is impo an o no ice ha ou s udy p og amme will ocus
on he mul idisciplina i y o cybe secu i y. In ac , DJM-CYBER
p oposes 4 acks, and he s uden s will ecei e a double deg ee
i le, mo e speci ically 4 di e en double deg ee p og ammes a e
acc edi ed by a conso ium consis ing o i e uni e si ies.
The numbe o isi ed uni e si ies will be ei he 2 o 3 in each
p oposed ack. We would like o minimize he numbe o mobili ies
o he s uden s ha need o adap o he new uni e si y en i on-
men and coun y. We seek o achie e in e na ionaliza ion o hei
knowledge and language no only ela ed o he cybe secu i y s udy.
Howe e , each s uden should ha e he possibili y o ollow he
ack ha he/she likes he mos , and he e o e, he op ion o 3
isi ed uni e si ies is equi ed o s uden s who al eady s udied a
bachelo ’s deg ee in one o he in ol ed pa ne coun ies.
Mo eo e , each exis ing s udy p og amme p esen s a di e en
numbe o in ol ed uni e si ies. In some cases, hey ha e in ol ed
associa ed pa ne s which ei he manage he summe /win e school
o pa icipa e in he hesis de elopmen . The numbe o acks is
also a ied. SECCLO s udy p og amme is he closes one due o he
numbe o in ol ed uni e si ies. Following he exis ing p oposal,
DJM-CYBER akes wo yea s o a o al o 120 ECTS. This allows
s uden s o ha e a possible access o u u e Ph.D. s udy p og amme
wi hou a need o any addi ional s udy. Mo eo e , each semes e
will coun 30 ECTS as in all analysed p og ammes.
The numbe c edi s assigned o he MSc hesis is 30 ECTS. The
hesis is an impo an componen o he s udy p og amme which
is compulso y in all analyzed join mas e s. We also seek o gi e o
s uden s he possibili y o wo k independen ly while supe ised by
an expe in he ield. Mos o he exis ing p og ammes assign he
en i e las semes e o he hesis p epa a ion. No e ha he e is no
common s a egy o he numbe o isi ed uni e si ies whe eas
an in e nship is always included.
5.2 DJM-CYBER De elopmen and S uc u e
Ou s udy p og amme DJM-CYBER consis s o 4 di e en acks
ha co e 4 main cybe secu i y a eas:
(1) T ack 1. Cybe secu i y Design and De elopmen ,
(2) T ack 2. In as uc u e Secu i y and Resilience,
(3) T ack 3. Secu i y and Cybe In elligence,
(4) T ack 4. Cybe secu i y Ope a ions and Managemen .
All he acks ha e he same s a egy as shown in 1. Two uni-
e si ies o he conso ium a e esponsible o e e y ack. I is
planned ha s uden s will a end cou ses o a comple e yea in
one uni e si y. This pe mi s a be e cul u al acquain ance and aca-
demic in ol emen o he s uden in he hos ing coun y. Mo eo e ,
each s uden should ha e he possibili y o access he desi ed ack
no depending on he coun y ha he/she s udied. Fo ins ance,
s uden s who ha e a bachelo ’s deg ee om ei he he Czech Re-
public o Cyp us can anyway selec T ack 1 wi h he limi a ion ha
Semes e 4, he hesis de elopmen , will be done in collabo a ion
be ween one o he wo HEIs in ol ed in he cu en ack and wi h
one o he o he pa ne HEIs.
Ou mas e ollows he ENISA ecommenda ions, and each ack
is designed o co e 2 ENISA p o iles allowing a clea pa h om
academia o wo k posi ions. Mo eo e , a na u al con inua ion is
o become a Cybe secu i y Resea che in all cases. The connec ion
be ween academia and p o iles is achie ed by selec ing cou ses o
each pa ne wi h he ENISA key skills and knowledge desc ibed in
he conside ed p o ile. Mo eo e , he NIST NICE wo k oles ela ed
o he ack a e also p o ided.
Each ack was designed using bo h he Cu icula Designe and
he Cybe secu i y P o ile applica ions allowing, espec i ely, he
mapping o NIST NICE amewo k and ENISA ECSF amewo ks.
DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly
Figu e 1: S uc u e o DJM-CYBER s udy p og am. C edi s o he empla e o Slidesgo and F eepik.
In case o T ack 1, a i s we ocus on cou ses co e ing hose
REWIRE skills ha he Cybe secu i y A chi ec and Cybe secu-
i y Implemen e p o iles ha e in common, i.e., "Da a Secu i y",
"En e p ise A chi ec u e and In as uc u e Design", "In o ma ion
Secu i y Con ols Assessmen ", "Ope a ing Sys ems", and "So wa e
De elopmen ". Fo ins ance, "En e p ise A chi ec u e and In as-
uc u e Design" is co e ed in "Cybe secu i y A chi ec u e and
Ope a ions" (EUC) and "Mobile Ne wo k Communica ion Sys ems"
(BUT) subjec s. Then we ied o each ou he emaining skills.
The main REWIRE skills, allowing he co ela ion be ween cou ses
and ENISA p o iles, o each subjec a e lis ed below in he acks
desc ip ions. We e e o Sec ions 4.1 and 4.2 o mo e de ails on
he ools.
Acco dingly, ou DJM-CYBER mas e p o ides g adua es wi h
a wide ange o ca ee oppo uni ies in a ious sec o s, such as
go e nmen , inance, heal hca e, SMEs and echnology indus y.
G adua es will be well-p epa ed o a leas he ollowing oles: Cy-
be secu i y Implemen e ; Cybe secu i y A chi ec ; Cybe secu i y
Resea che ; Digi al Fo ensics In es iga o ; Cybe Inciden Respon-
de ; Cybe Th ea In elligence Specialis ; Cybe Legal, Policy &
Compliance O ice ; Chie In o ma ion Secu i y O ice and Cybe -
secu i y Risk Manage .
We ecognize he impo ance o specializa ion in a mas e deg ee
and, he e o e, elec i e cou ses a e p o ided whene e possible.
Howe e , a s ong backg ound is also i al o co e he p o ile skills
and knowledge. Acco dingly, elec i e cou ses can be added o he
ack a e he basic knowledge is achie ed. Following he need
o in eg a ion each uni e si y p o ides elec i e language cou ses.
In e nships and summe schools a e no manda o y in his p og am.
Bo h summe schools and in e nships a e bene icial o s uden s,
hus hey will be inco po a ed in he u u e ei he by pa ne s o he
p ojec o by associa ed pa ne s. Summe schools will be a ailable
a he end o e e y academy yea and in e nships du ing he second
yea o s udy.
T ack 1. Cybe secu i y Design and De elopmen . This ack is
join ly p o ided by he Eu opean Uni e si y Cyp us (EUC) and
B no Uni e si y o Technology (BUT) uni e si ies. In he i s yea ,
s uden s en ich hei knowledge in cybe secu i y go e nance, e hi-
cal hacking, and da a p o ec ion. In he second yea , c yp og aphy,
IoT, and ne wo ks a e he main ocus o his ack. The cou ses
a e in e connec ed o e he yea s. Fo ins ance, ollowing “Da a
P i acy in he E a o Da a Mining and AI“ cou se, he s uden will
be in oduced o da a p i acy om a legal and economic poin
o iew whe eas wi h “Mode n C yp og aphy“ and “Pa allel Da a
P ocessing“ cou ses hey will s udy he same opic in c yp og aphy-
and machine lea ning-o ien ed way. Figu e 2 shows he le el o
mul idisciplina i y in T ack 1. The SPARTA Cu icula Designe
was deployed in he analysis. A las , T ack 1 passes he SPARTA
p ac ical lec u e limi wi h a 64% sco e.
Semes e 1 (EUC, 30 ECTS) consis s o h ee compulso y cou ses:
•
In oduc ion o Cybe secu i y (Comp., 10 ECTS) Main skill(s)
acqui ed: Da a Secu i y.
•
Cybe secu i y Policy, Go e nance, Law and Compliance
(Comp., 10 ECTS). Main skill(s) acqui ed: Policy De elop-
men , and Law, Policy, and E hics skills.
•
Communica ions and Ne wo k Secu i y (Comp., 10 ECTS)
Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k
Secu i y and Th ea Analysis.

ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Danidou, e al.
Figu e 2: Cu icula Designe analysis o T ack 1.
Semes e 2 (EUC, 30 ECTS) includes wo compulso y cou ses (20
ECTS) and one elec i e cou se (10 ECTS) o choose among h ee
possibili ies:
•
Cybe secu i y A chi ec u e and Ope a ions (Comp., 10 ECTS).
Main skill(s) acqui ed: Risk Managemen , Tes ing and E al-
ua ion, Inciden Managemen , En e p ise A chi ec u e and
In as uc u e Design, and Da a Secu i y.
•
E hical Hacking and Pene a ion Tes ing (Comp., 10 ECTS).
Main skill(s) acqui ed: Tes ing and E alua ion, and Law, Pol-
icy, and E hics.
•
Da a P i acy in he E a o Da a Mining and AI (Elec ., 10
ECTS) This cou se has as main key skills: Da a P i acy, Da a
Secu i y, and Da a Analysis.
•
Cybe secu i y Risk Analysis and Managemen (Elec ., 10
ECTS) Main skill(s) acqui ed: Risk Managemen , and Tes ing
and E alua ion.
•
Inciden Response and Fo ensic Analysis (Elec ., 10 ECTS)
Main skill(s) acqui ed: Inciden Managemen , and Digi al
Fo ensics.
Semes e 3 (BUT, 30 ECTS) consis s o i e compulso y cou ses
(25 ECTS) and one elec i e cou se (5 ECTS) o choose among h ee
possibili ies:
•
Mobile Ne wo k Communica ion Sys ems (Comp., 6 ECTS).
Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k
Secu i y, En e p ise A chi ec u e and In as uc u e Design,
and Ne wo k Managemen .
•
Founda ion o C yp og aphy (Comp., 6 ECTS). Main skill(s)
acqui ed: Da a Secu i y, In o ma ion Sys ems and Ne wo k
Secu i y, and Collabo a e and Communica e.
•
Mode n C yp og aphy (Comp., 6 ECTS). Main skill(s) ac-
qui ed: Da a Secu i y, Da a P i acy, So wa e De elopmen ,
P oblem sol ing and C i ical Thinking.
•
Pa allel Da a P ocessing (Comp., 6 ECTS). Main skill(s) ac-
qui ed: Da a Analysis, So wa e De elopmen , and In o ma-
ion Sys ems and Ne wo k Secu i y.
•
Semes al Thesis (Comp., 1 ECTS). Main skill(s) acqui ed:
So wa e De elopmen , P oblem sol ing and C i ical Think-
ing, and Technology Fluency.
•
Da a S uc u es and Algo i hms (Elec . 5 ECTS). Main skill(s)
acqui ed: Da a Analysis, and So wa e De elopmen .
•
Mode n Ne wo k Technologies (Elec ., 5 ECTS). Main skill(s)
acqui ed: In o ma ion Sys ems and Ne wo k Secu i y, and
Ne wo k Managemen .
•
Op ical Ne wo ks (Elec ., 5 ECTS). Main skill(s) acqui ed:
In o ma ion Sys ems and Ne wo k Secu i y, and Ne wo k
Managemen .
Semes e 4 (BUT, 30 ECTS): Diploma Thesis (Comp., 30 ECTS).
Main skill(s) acqui ed: So wa e De elopmen , P oblem sol ing and
C i ical Thinking, and Technology Fluency.
T ack 2. In as uc u e Secu i y and Resilience. This ack is
join ly implemen ed by he Uni e si y o Mu cia (UMU) and Po-
li ecnico di Milano (POLIMI). In he i s yea , s uden s en ich hei
knowledge in cybe secu i y law and managemen , secu i y, p i-
acy, e hical hacking and malwa e echnologies. In he second yea ,
s uden s ge acquain ed wi h da a science, neu al ne wo ks and
deep lea ning, cybe c ime and compu e e hics. Figu e 3 shows he
mul idisciplina i y assessmen o T ack 2 measu ed in he SPARTA
Cu icula Designe . T ack 2 also passes he SPARTA limi o p ac i-
cal lec u e achie ing a 79% o hem.
Figu e 3: Cu icula Designe analysis o T ack 2.
Semes e 1 consis s o 6 manda o y cou ses (UMU, 30 ECTS):
•
E hical Hacking (Comp., 6 ECTS). Main skill(s) acqui ed:
Th ea Analysis, and Law, Policy, and E hics.
•
Techniques o he Managemen o he Cybe secu i y (Comp.,
6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and
Ne wo k Secu i y, Business Con inui y, Iden i y Manage-
men , and Risk Managemen .
•
Cybe De ense (Comp., 6 ECTS). Main skill(s) acqui ed: In o -
ma ion Sys ems and Ne wo k Secu i y, En e p ise A chi ec-
u e and In as uc u e Design, and Inciden Managemen .
DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly
•
Cybe secu i y and Communica ions (Comp., 6 ECTS). Main
skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y,
Inciden Managemen , and Ne wo k Managemen .
•
C yp og aphy (Comp., 3 ECTS). Main skill(s) acqui ed: Da a
Secu i y.
•
Inno a ion and En ep eneu ship Semina (Comp., 3 ECTS).
Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking,
and Technology Fluency.
Semes e 2 consis s o i e manda o y cou se and ou elec i e
cou ses o choose om (UMU, 30 ECTS) :
•
Cybe Secu i y Lab (Comp., 6 ECTS). Main skill(s) acqui ed:
P oblem sol ing and C i ical Thinking, and Inciden Man-
agemen .
•
5G and IoT and Cybe -physical sys ems secu i y (Elec ., 6
ECTS). Main skill(s) acqui ed: Ne wo k Managemen , and
Physical De ice Secu i y.
•
So wa e Secu i y & Secu e So wa e li ecycle (Comp., 3
ECTS). Main skill(s) acqui ed: So wa e De elopmen , Inci-
den Managemen , and Da a Secu i y.
•
AAI Au hen ica ion and Au ho iza ion In as uc u es (Comp.,
3 ECTS). Main skill(s) acqui ed: Iden i y Managemen , and
En e p ise A chi ec u e and In as uc u e Design.
•
Ad anced Techniques in Cybe In elligence (Elec ., 6 ECTS).
Main skill(s) acqui ed: In elligence Analysis.
•
Cybe secu i y and Law (Comp., 3 ECTS). Main skill(s) ac-
qui ed: Da a P i acy, En e p ise A chi ec u e and In as uc-
u e Design.
•
Dis ibu ed Sys ems Secu i y (Elec ., 3 ECTS). Main skill(s)
acqui ed: In o ma ion Secu i y Con ols Assessmen .
•
Ha dwa e Secu i y (Elec ., 3 ECTS). Main skill(s) acqui ed:
In o ma ion Secu i y Con ols Assessmen and Da a Secu-
i y.
•
Malwa e & A ack Technologies (Comp., 3 ECTS). Main
skill(s) acqui ed: Tes ing and E alua ion.
Semes e 3 consis s o 2 manda o y cou ses and 6 elec i e cou ses
o choose om (POLIMI, 30 ECTS):
•
O ensi e and De ensi e Cybe secu i y (Comp., 5 ECTS).
Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k
Secu i y.
•
Da a Science and Secu i y o Mobili y (Elec ., 10 ECTS).
Main skill(s) acqui ed: In o ma ion Sys ems and Ne wo k
Secu i y, and Physical De ice Secu i y.
•
Resilience o C i ical In as uc u es (Elec ., 5 ECTS). Main
skill(s) acqui ed: En e p ise A chi ec u e and In as uc u e
Design.
•
C yp og aphy and A chi ec u es o Compu e Secu i y (Elec .,
5 ECTS). Main skill(s) acqui ed: Da a Secu i y, and En e p ise
A chi ec u e and In as uc u e Design.
•
Digi al Fo ensics and Cybe c ime (Comp., 5 ECTS). Main
skill(s) acqui ed: Digi al Fo ensics.
•
Sa e y in Au oma ion Sys ems (Elec ., 5 ECTS). Main skill(s)
acqui ed: Th ea Analysis.
•
Compu e E hics (Elec ., 5 ECTS). Main skill(s) acqui ed: Law,
Policy, and E hics.
•
A i icial Neu al Ne wo ks and Deep Lea ning (Elec ., 5
ECTS). Main skill(s) acqui ed: Da a Analysis.
Semes e 4 (POLIMI, 30 ECTS): Thesis consul a ion (Comp., 30
ECTS). Main skill(s) acqui ed: So wa e De elopmen , P oblem sol -
ing and C i ical Thinking, and Technology Fluency.
T ack 3. Secu i y and Cybe In elligence. This ack is join ly p o-
ided by he Uni e si y o Mu cia, Spain (UMU) and Eö ös Lo ánd
Uni e si y, Hunga y (ELTE). In he i s yea , s uden s en ich hei
knowledge in cybe secu i y law and managemen , secu i y, p i-
acy, e hical hacking and malwa e echnologies. In he second yea ,
s uden s ocus on ad anced c yp og aphy, he secu i y aspec s
o Machine Lea ning/A i icial In elligence (ML/AI), open-sou ce
da a analysis echnologies and s eam mining, he eby acqui ing a
b ead h o knowledge in a ious ele an opics in cybe secu i y
and a mo e ocused skillse in secu i y da a analy ics necessa y o
a leas he ollowing ENISA ECSF oles: Cybe Th ea In elligence
Specialis ; Cybe Legal, Policy & Compliance O ice; and Cybe se-
cu i y A chi ec . 4 shows he mul idisciplina i y sco e o T ack 3
measu ed wi h he SPARTA Cu icula Designe . T ack 3 also passes
he SPARTA limi o p ac ical lec u es achie ing a 77% sco e.
Figu e 4: Cu icula Designe analysis o T ack 3.
Semes e 1 consis s o 6 manda o y cou ses (UMU, 30 ECTS):
•
E hical Hacking (Comp., 6 ECTS). Main skill(s) acqui ed:
Th ea Analysis, and Law, Policy, and E hics.
•
Techniques o he Managemen o he Cybe secu i y (Comp.,
6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and
Ne wo k Secu i y, Business Con inui y, Iden i y Manage-
men , and Risk Managemen .
•
Cybe De ense (Comp., 6 ECTS). Main skill(s) acqui ed: In o -
ma ion Sys ems and Ne wo k Secu i y, En e p ise A chi ec-
u e and In as uc u e Design, and Inciden Managemen .
•
Cybe secu i y and Communica ions (Comp., 6 ECTS). Main
skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y,
Inciden Managemen , and Ne wo k Managemen .
•
C yp og aphy (Comp., 3 ECTS). Main skill(s) acqui ed: Da a
Secu i y.
•
Inno a ion and En ep eneu ship Semina (Comp., 3 ECTS).
Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking,
and Technology Fluency.
ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly Danidou, e al.
Semes e 2 consis s o i e manda o y cou ses and ou elec i e
cou ses o choose om (UMU, 30 ECTS):
•
Cybe Secu i y Lab (Comp., 6 ECTS). Main skill(s) acqui ed:
P oblem sol ing and C i ical Thinking, and Inciden Man-
agemen .
•
5G and IoT and Cybe -physical sys ems secu i y (Elec ., 6
ECTS). Main skill(s) acqui ed: Ne wo k Managemen , and
Physical De ice Secu i y.
•
So wa e Secu i y & Secu e So wa e li ecycle (Comp., 3
ECTS). Main skill(s) acqui ed: So wa e De elopmen , Inci-
den Managemen , and Da a Secu i y.
•
AAI Au hen ica ion and Au ho iza ion In as uc u es (Comp.,
3 ECTS). Main skill(s) acqui ed: Iden i y Managemen , and
En e p ise A chi ec u e and In as uc u e Design.
•
Ad anced Techniques in Cybe In elligence (Elec ., 6 ECTS).
Main skill(s) acqui ed: In elligence Analysis.
•
Cybe secu i y and Law (Comp., 3 ECTS). Main skill(s) ac-
qui ed: Da a P i acy, En e p ise A chi ec u e and In as uc-
u e Design.
•
Ad anced aspec s o Cybe secu i y Managemen (Elec ., 3
ECTS). Main skill(s) acqui ed: Business con inui y, Th ea
Analysis, and In elligence Analysis.
•
Human Fac o s and P i acy & Online Righ s (Elec ., 3 ECTS).
Main skill(s) acqui ed: Law, Policy, and E hics.
•
Malwa e & A ack Technologies (Comp., 3 ECTS). Main
skill(s) acqui ed: Tes ing and E alua ion.
Semes e 3 consis s o one compulso y cou se and 6 elec i e
cou ses o choose om (ELTE, 30 ECTS):
•
Cybe Secu i y Lab II (Comp., 6 ECTS). Main skill(s) acqui ed:
Th ea Analysis, and In elligence Analysis.
•
Da a Science Lab II (Op ., 6 ECTS).Main skill(s) acqui ed:
Da a Science and Analy ics, In o ma ion and Knowledge
Managemen , Documen a ion P oduc ion.
•
Ad anced c yp og aphy (Elec ., 6 ECTS). Main skill(s) ac-
qui ed: Da a Secu i y.
•
Da a Secu i y (Elec ., 6 ECTS). Main skill(s) acqui ed: Da a
Secu i y, Da a P i acy, Da a Science and Analy ics, and In-
elligence Analysis.
•
In oduc ion o Da a Science (Elec ., 6 ECTS). Main skill(s)
acqui ed: Da a Science and Analy ics
•
Open-sou ce echnologies o eal- ime da a analy ics (Elec .,
6 ECTS). Main skill(s) acqui ed: En e p ise A chi ec u e and
In as uc u e Design, Technology Fluency, Technology T end
Moni o ing.
•
S eam mining (Elec ., 6 ECTS). Main skill(s) acqui ed: Th ea
Analysis, and In elligence Analysis.
Semes e 4 (ELTE, 30 ECTS): Thesis Consul a ion (Comp., 30
ECTS). Main skill(s) acqui ed: So wa e De elopmen , P oblem sol -
ing and C i ical Thinking, and Technology Fluency.
T ack 4. Cybe secu i y Ope a ions and Managemen . This ack
is join ly implemen ed by he Uni e si y o Mu cia, Spain (UMU)
and he Eu opean Uni e si y Cyp us (EUC). In he i s yea , s u-
den s en ich hei knowledge in cybe secu i y law and manage-
men , secu i y, p i acy, e hical hacking and malwa e echnologies.
In he second yea , s uden s deepen hei knowledge in a ious
aspec s o cybe secu i y (managemen , policy, law, o a chi ec u e).
5 shows he mul idisciplina i y assessmen o T ack 4 measu ed in
he SPARTA Cu icula Designe . T ack 4 also passes he SPARTA
limi o p ac ical lec u e achie ing a 55% sco e.
Figu e 5: Cu icula Designe analysis o T ack 4.
Semes e 1 consis s o 6 manda o y cou ses (UMU, 30 ECTS):
•
E hical Hacking (Comp., 6 ECTS). Main skill(s) acqui ed:
Th ea Analysis, and Law, Policy, and E hics.
•
Techniques o he Managemen o he Cybe secu i y (Comp.,
6 ECTS). Main skill(s) acqui ed: In o ma ion Sys ems and
Ne wo k Secu i y, Business Con inui y, Iden i y Manage-
men , and Risk Managemen .
•
Cybe De ense (Comp., 6 ECTS). Main skill(s) acqui ed: In o -
ma ion Sys ems and Ne wo k Secu i y, En e p ise A chi ec-
u e and In as uc u e Design, and Inciden Managemen .
•
Cybe secu i y and Communica ions (Comp., 6 ECTS). Main
skill(s) acqui ed: In o ma ion Sys ems and Ne wo k Secu i y,
Inciden Managemen , and Ne wo k Managemen .
•
C yp og aphy (Comp., 3 ECTS). Main skill(s) acqui ed: Da a
Secu i y.
•
Inno a ion and En ep eneu ship Semina (Comp., 3 ECTS).
Main skill(s) acqui ed: P oblem sol ing and C i ical Thinking,
and Technology Fluency.
Semes e 2 consis s o one manda o y cou se and 10 elec i e
cou ses o choose om (UMU, 30 ECTS):
•
Cybe Secu i y Lab (Comp., 6 ECTS). Main skill(s) acqui ed:
P oblem sol ing and C i ical Thinking, and Inciden Man-
agemen .
•
5G and IoT and Cybe -physical sys ems secu i y (Elec ., 6
ECTS). Main skill(s) acqui ed: Ne wo k Managemen , and
Physical De ice Secu i y.
•
So wa e Secu i y & Secu e So wa e li ecycle (Comp., 3
ECTS). Main skill(s) acqui ed: So wa e De elopmen , Inci-
den Managemen , and Da a Secu i y.
•
AAI Au hen ica ion and Au ho iza ion In as uc u es (Comp.,
3 ECTS). Main skill(s) acqui ed: Iden i y Managemen , and
En e p ise A chi ec u e and In as uc u e Design.
DJM-CYBER: A Join Mas e in Ad anced Cybe secu i y ARES 2023, Augus 29–Sep embe 01, 2023, Bene en o, I aly
•
Ad anced Techniques in Cybe In elligence (Elec ., 6 ECTS).
Main skill(s) acqui ed: In elligence Analysis.
•
Cybe secu i y and Law (Comp., 3 ECTS). Main skill(s) ac-
qui ed: Da a P i acy, En e p ise A chi ec u e and In as uc-
u e Design.
•
Ad anced aspec s o Cybe secu i y Managemen (Elec ., 3
ECTS). Main skill(s) acqui ed: Business con inui y, Th ea
Analysis, and In elligence Analysis
•
Dis ibu ed Sys ems Secu i y (Elec ., 3 ECTS). Main skill(s)
acqui ed: In o ma ion Secu i y Con ols Assessmen .
•
Ha dwa e Secu i y (Elec ., 3 ECTS). Main skill(s) acqui ed:
In o ma ion Secu i y Con ols Assessmen and Da a Secu-
i y.
•
Human Fac o s and P i acy & Online Righ s (Elec ., 3 ECTS).
Main skill(s) acqui ed: Law, Policy, and E hics.
•
Malwa e & A ack Technologies (Elec ., 3 ECTS). Main skill(s)
acqui ed: Tes ing and E alua ion.
Semes e 3 consis s o h ee manda o y cou ses (EUC, 30 ECTS):
•
Cybe secu i y A chi ec u e & Ope a ions (Comp., 10 ECTS).
Main skill(s) acqui ed: Risk Managemen , Tes ing and E al-
ua ion, Inciden Managemen , En e p ise A chi ec u e and
In as uc u e Design, and Da a Secu i y.
•
Cybe secu i y Policy, Go e nance, Law and Compliance
(Comp., 10 ECTS). Main skill(s) acqui ed: Policy De elop-
men , and Law, Policy, and E hics skills.
•
Cybe secu i y Risk Analysis and Managemen (Comp., 10
ECTS). Main skill(s) acqui ed: Risk Managemen , and Tes ing
and E alua ion.
Semes e 4 (EUC, 30 ECTS): Thesis (Comp., 30 ECTS). Main skill(s)
acqui ed: So wa e De elopmen , P oblem sol ing and C i ical
Thinking, and Technology Fluency.
6 CONCLUSIONS
I is a well-known ac ha he wo ldwide wo k o ce gap in cy-
be secu i y is measu ed in millions o missing expe s. Tackling
his challenge is no an easy ask. One signi ican aspec o he
mix u e o app oaches a e highly ailo ed, no el s udy p og ammes
o e ed ei he by single uni e si ies o join p og ammes p o ided
by highe educa ion conso ia consis ing o mul iple uni e si ies
and/o colleges. Ensu ing ha any new s udy p og amme will mee
he equi emen s o he job ma ke is i sel a daun ing ask, which
is o una ely made easie ia publicly a ailable skills amewo ks
like he ENISA’s Eu opean Cybe secu i y F amewo k (ECSF) o
he Na ional Ins i u e o Science and Technology’s (NIST) NICE
Compe encies F amewo k.
The goal o his pape was o desc ibe a me hodology allowing
single uni e si ies o highe educa ion conso ia o selec he bes
eely a ailable ools which migh aid hem in he design and con-
inuous de elopmen o no el cybe secu i y s udy p og ammes. We
desc ibed he mos ele an EU-le el p ojec s and he aluable ools
de eloped by hem. We also ouched he mos ele an skills ame-
wo ks, namely by desc ibing he abo e-men ioned ECSF and NICE
CF. Finally, we u ilized he p esen ed se o ools and amewo ks o
design and assess a join mas e -le el s udy p og amme de eloped
by a conso ium o i e Eu opean uni e si ies and s uc u ed in o
ou ma kedly di e en s udy acks. We measu ed he co e age o
he mos ele an skills and sco ed he acks’ p ac icali y.
Ou p oposal p o ides a clea and ecognized ecosys em consis -
ing o ools and amewo k o he de elopmen o cybe secu i y
compe encies and skills, ensu ing ha g adua es a e well-equipped
o mee he demands o he cybe secu i y wo k o ce in Eu ope and
beyond. I also p o ide a common language and e e ence poin
o employe s, educa o s, and s uden s, acili a ing communica ion,
s anda diza ion, and consis ency in cybe secu i y educa ion and
aining ac oss Eu ope.
ACKNOWLEDGMENTS
The ollowing unding sou ces a e g a e ully acknowledged: he
ERASMUS+ E asmus Mundus Design Measu es (EMDM) p og amme
o he Eu opean Union (g an 1701-EPP-1-2020-1-LT-EPPKA2-SSA-
B ’DJM-CYBER’), he ERASMUS+ Sec o Skills Alliance (SSA) p o-
g amme o he Eu opean Union (g an 621701-EPP-1-2020-1-LT-
EPPKA2-SSA-B ’REWIRE’), and P ojec no. TKP2021-NVA-29 which
has been implemen ed wi h he suppo p o ided by he Minis y o
Cul u e and Inno a ion o Hunga y om he Na ional Resea ch, De-
elopmen and Inno a ion Fund, inanced unde he TKP2021-NVA
unding scheme.
REFERENCES
[1]
Bo ka Je man Blažič. 2021. The cybe secu i y labou sho age in Eu ope: Mo ing
o a new concep o educa ion and aining. Technology in Socie y 67 (2021),
101769. h ps://doi.o g/10.1016/j. echsoc.2021.101769
[2]
Se gey B a us, I án A ce, Michael E. Locas o, and S e ano Zane o. 2014. Why
O ensi e Secu i y Needs Enginee ing Tex books: O , How o A oid a Replay
o "C yp o Wa s" in Secu i y Resea ch. login Usenix Mag. 39, 4 (2014). h ps:
//www.usenix.o g/publica ions/login/augus 14/b a us
[3]
CONCORDIA. 2022. Teach- he-Teache s in high-school. Me hodology and Guide-
lines. (2022). h ps://www.conco dia-h2020.eu/wp-con en /uploads/2022/11/
Teach- he-Teache sMe hodology- o -publica ion.pd
[4]
Cybe Sec4Eu ope. 2023. Final Educa ional and Assessmen F amewo k (Cybe -
Sec4Eu ope). h ps://cybe sec4eu ope.eu/wp-con en /uploads/2022/07/D6.6-
Final-Educa ional-and-Assessmen -F amewo k_submi ed.pd
[5]
Pe Dzu enda and Sa a Ricci. 2022. R3.4.1 Mapping he amewo k o exis ing
cou ses and schemes. h ps:// ewi ep ojec .eu/wp-con en /uploads/2023/03/
REWIRE_R3.4.1_Deli e able- 8-Final-EC-Check.pd
[6]
ENISA. 2022. Eu opean Cybe secu i y Skills F amewo k Role P o-
iles. h ps://www.enisa.eu opa.eu/publica ions/eu opean-cybe secu i y-skills-
amewo k- ole-p o iles
[7]
CSEC2017 Join Task Fo ce. 2017. Cybe secu i y Cu icula 2017 — Cu iculum
Guidelines o Pos -Seconda y Deg ee P og ams in Cybe secu i y. Re ie ed om
Associa ion o Compu ing Machine y: h ps://www.acm.o g/bina ies/con en /
asse s/educa ion/cu icula- ecommenda ions/csec2017.pd .
[8]
Jan Hajny. 2020. D9.2 Cu icula desc ip ions. h ps://www.spa a.eu/asse s/
deli e ables/SPARTA-D9.2-Cu icula-desc ip ions-PU-M18.pd
[9]
Jan Hajny, Sa a Ricci, Edmundas Piesa skas, and Ma ek Siko a. 2021. Cybe -
secu i y Cu icula Designe . In P oceedings o he 16 h In e na ional Con e -
ence on A ailabili y, Reliabili y and Secu i y (Vienna, Aus ia) (ARES 21). As-
socia ion o Compu ing Machine y, New Yo k, NY, USA, A icle 144, 7 pages.
h ps://doi.o g/10.1145/3465481.3469183
[10]
Jan Hajny, Ma ek Siko a, A hanasios Vasileios G amma opoulos, and Fabio
Di F anco. 2022. Adding Eu opean Cybe secu i y Skills F amewo k in o Cu ic-
ula Designe . In P oceedings o he 17 h In e na ional Con e ence on A ailabili y,
Reliabili y and Secu i y (Vienna, Aus ia) (ARES ’22). Associa ion o Compu ing
Machine y, New Yo k, NY, USA, A icle 82, 6 pages. h ps://doi.o g/10.1145/
3538969.3543799
[11]
Igo Nai Fo ino, Rica do Neisse, Juan He nandez Ramos, Nicole a Polemi, Gian-
Luca Ruzzan e, Ma kus Figwe , and Alessand o Laza i. 2019. A P oposal o a
Eu opean Cybe secu i y Taxonomy. Re ie ed om EUROPA - Eu opean Union
websi e, he o icial EU websi e: h ps://publica ions.j c.ec.eu opa.eu/ eposi o y/
bi s eam/JRC118089/ axonomy- 2.pd .
[12]
Rodney Pe e sen, Danielle San os, Ma hew C. Smi h, Ka en A. We zel, and G eg
Wi e. 2020. NIST Special Publica ion 800-181 Re ision 1: Wo k o ce F amewo k
o Cybe secu i y (NICE F amewo k). a ailable online a h ps://n lpubs.nis .go /