Course in Ethics in Simulated Academic Cyberattacks
Online 300-hour course in ethics in simulated academic cyberattacks. 6 modules covering Directive 2013/40/EU (attacks against information systems), the Budapest Convention on Cybercrime (2001) and Kali Linux (isolated laboratory). Personal tutor assigned and enrolment open.
Take the controls.
Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain the role of simulated attacks in university education.
Interpret the legal framework that defines authorised intrusion testing.
Apply ethical research principles to security experiments.
Design safe exercises with isolation, authorisation and rules of engagement.
Manage the responsible disclosure of discovered vulnerabilities.
Foster a professional culture of ethics in cybersecurity.
Produce the complete design of a responsible academic exercise.
Who it's for
- Cybersecurity lecturer who wants to specialise in Ethics in Simulated Academic Cyberattacks.
- Penetration testing analyst who wants to specialise in Ethics in Simulated Academic Cyberattacks.
- Cybersecurity exercise coordinator who wants to specialise in Ethics in Simulated Academic Cyberattacks.
- Information security researcher who wants to specialise in Ethics in Simulated Academic Cyberattacks.
- Vulnerability disclosure manager who wants to specialise in Ethics in Simulated Academic Cyberattacks.
- Legal adviser in cybersecurity who wants to specialise in Ethics in Simulated Academic Cyberattacks.
- Engineering or science graduates seeking to enter higher education.
What you'll work with
- Directive 2013/40/EU (attacks against information systems)
- Budapest Convention on Cybercrime (2001)
- Spanish Criminal Code, arts. 197 bis and 264
- NIST SP 800-115 (technical security testing)
- NIST SP 800-84 (test, training and exercise programmes)
- ISO/IEC 29147 (vulnerability disclosure)
- Menlo Report (ethics in ICT research, 2012)
6 modules · 300 h
1.1Ethical hacking: definition and limits1.2Penetration testing and red team exercises1.3CTF competitions and their educational value1.4Cyber ranges and simulation environments1.5Academic cyber defence exercises1.6Vulnerability reward programmes1.7Offensive and defensive research1.8Professional profiles in the sector1.9Ethical competences of the professional1.10Case study: analysis of a university cyber defence exercise
2.1Budapest Convention on Cybercrime2.2Criminal Code: articles 197 bis and 2642.3Directive 2013/40/EU on attacks against systems2.4Authorisation and testing contracts2.5Dual-use tools and their possession2.6Intellectual property and reverse engineering2.7Data protection in testing2.8Export control of intrusion software2.9University liability2.10Workshop: drafting a testing authorisation agreement
3.1Principles of the Menlo Report3.2Beneficence and non-maleficence3.3Respect for persons and consent3.4Social engineering in research and deception3.5Ethics and cybersecurity committees3.6Risks to third parties3.7Responsible publication of results3.8Coordinated vulnerability disclosure3.9ISO/IEC 29147 and ISO/IEC 301113.10Practice: ethical opinion on a phishing study
4.1Isolation of laboratories and networks4.2Virtualised environments and containers4.3Synthetic data versus real data4.4Rules of engagement for the exercise4.5Realistic scenarios without real harm4.6Supervision and control of the exercise4.7Incident management during the simulation4.8Clean-up and restoration of the environment4.9Learning assessment4.10Laboratory: designing an isolated cyber range
5.1Ethical codes of (ISC)² and EC-Council5.2Offensive mindset and responsibility5.3Preventing misuse by students5.4Codes of conduct in competitions5.5Diversity and inclusion in cybersecurity5.6Relations with police and security forces5.7Collaboration with companies and defence5.8Wellbeing and stress in intensive exercises5.9Academic integrity in CTFs5.10Case study: handling an abuse during a competition
6.1Learning objectives6.2Legal framework and authorisations6.3Scenario design6.4Architecture of the isolated environment6.5Rules of engagement6.6Ethical assessment of the exercise6.7Learning assessment plan6.8Incident management plan6.9Report and presentation6.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded lectures and an assigned technical tutor. No fixed timetable: students progress at their own pace within the intake, which makes it possible to combine the course with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Kali Linux (isolated laboratory), GNS3, VirtualBox, Wireshark, in free, academic or evaluation versions. Case studies are based on real procedures from academic cyber range exercises, research ethics committee reviews and tabletop exercises. Assessment is continuous, module by module, plus a final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain the role of simulated attacks in university education.
Interpret the legal framework that defines authorised intrusion testing.
Apply ethical research principles to security experiments.
Design safe exercises with isolation, authorisation and rules of engagement.
Manage the responsible disclosure of discovered vulnerabilities.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme consists of 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
The course uses Kali Linux (isolated laboratory), GNS3, VirtualBox and Wireshark. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own SEIUM diploma upon passing the continuous assessment and the integrative project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Please check the credit transfer policy when you enrol.
Related programmes
Course in Digital Twins for Naval Fleets
Online 300 h course in digital twins for naval fleets. 6 modules covering ISO 23247 Automation systems. Digital twin framework for manufacturing, DNV-RP-A204 Qualification and assurance…
Weber and Solex carburetor tuning course
Weber and Solex Carburetor Tuning Course This course provides a detailed understanding of the operation and calibration of these classic carburetors. It explores key components such…
Course in Regulations for Air Transport of Dangerous Goods
300-hour online course in regulations for the air transport of dangerous goods. 6 modules covering ICAO Annex 18 (The Safe Transport of Dangerous Goods by Air),…
More in Nuclear Engineering & Nuclear Fuel Cycle Technologies
All Nuclear Engineering & Nuclear Fuel Cycle Technologies programmes → · How to apply · Fees & financing · Scholarships