Master’s in Runtime Monitoring Engineering
Online master's programme of 1,900 hours in runtime monitoring engineering, structured in 12 modules covering runtime verification with temporal logic, perception, planning and ODD monitoring, safe states and degradation, monitors for AI components and safety certification under ISO 26262, ISO 21448 and UL 4600, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Design runtime monitoring architectures.
Specify formal properties in temporal logic.
Implement perception, planning and ODD monitors.
Define safe states and degradation strategies.
Apply monitors to AI-based components.
Integrate monitors into the safety argument.
Develop a complete runtime monitoring project.
Who it's for
- Autonomous systems safety engineers looking to deepen their expertise in runtime monitoring.
- Runtime verification engineers who want a broader, standards-based view of supervision architectures.
- Functional safety architects designing monitors and fallback paths.
- Diagnostics engineers moving into supervision of automated driving systems.
- Validation engineers responsible for monitor coverage and field evidence.
- Researchers in formal methods seeking industrial application.
- Engineering or science graduates aiming to enter the automotive sector.
What you'll work with
- ISO 26262 (functional safety of road vehicles)
- ISO 21448 (safety of the intended functionality, SOTIF)
- UL 4600 (safety of autonomous products)
- ISO/PAS 8800 (safety and AI in road vehicles)
- UN ECE R157 (Automated Lane Keeping Systems)
- IEEE 2846 (assumptions for models in automated driving safety)
- ISO 34503 (ODD taxonomy for automated driving)
- IEC 61508 (functional safety of E/E/PE systems)
- RTAMT
- Breach
- ROS 2
- CARLA
- MATLAB/Simulink
12 modules · 1900 h
1.1The need for runtime monitors1.2Limits of pre-deployment verification1.3Doer-checker monitoring architectures1.4The simplex pattern and fallback control1.5Monitors versus redundancy1.6Monitoring in aviation and rail1.7Independence requirements1.8Taxonomy of monitors1.9Examples in production vehicles1.10Case study: monitoring architecture of a robotaxi
2.1Linear temporal logic (LTL)2.2Signal temporal logic (STL)2.3Monitor synthesis from specifications2.4Quantitative robustness in STL2.5Online and offline monitors2.6The RTAMT and Breach tools2.7Specification of traffic rules2.8Predictive monitors2.9Computational cost of monitors2.10Lab: STL safe-distance monitor
3.1Detection of out-of-distribution inputs3.2Uncertainty estimation in neural networks3.3Temporal consistency monitors3.4Consistency between redundant sensors3.5Detection of ghost objects3.6Image quality monitoring3.7Activation-based monitors3.8Evaluation of perception monitors3.9Integration with sensor fusion3.10Practical exercise: energy-based OOD detector
4.1Checking trajectories against collisions4.2The RSS model as a monitor4.3Online reachable sets4.4Dynamic feasibility monitors4.5Verification of traffic rules4.6Control stability monitors4.7Oscillation detection4.8Actuator monitoring4.9Arbitration and switching to fallback4.10Workshop: RSS monitor in CARLA
5.1ODD specification5.2Detection of ODD exit5.3Weather and visibility monitoring5.4Road type monitoring5.5Traffic density monitoring5.6Use of the map in ODD monitoring5.7Warnings and control transitions5.8Logging of exit events5.9Validation of ODD monitors5.10Lab: map-based ODD monitor
6.1ECU and process monitoring6.2Watchdogs and heartbeats6.3Latency and deadline monitoring6.4Memory and resource monitoring6.5Sensor diagnostics6.6Fault management in AUTOSAR6.7Monitoring of the communications network6.8Aggregation of health status6.9Degradation management6.10Practical exercise: deadline supervisor in ROS 2
7.1Definition of safe states7.2Minimal risk manoeuvre7.3Graceful degradation of functions7.4Fail-safe versus fail-operational7.5Independent fallback paths7.6Dual-channel architectures7.7Transition requirements7.8Coordination with the driver7.9Validation of emergency manoeuvres7.10Case study: MRM on a motorway
8.1Requirements of ISO/PAS 88008.2Input data monitoring8.3Model drift monitoring8.4Detection of adversarial attacks8.5Explainability monitors8.6Statistical guarantees of monitors8.7Conformal prediction for guarantees8.8Fleet monitoring8.9Continuous improvement loop8.10Workshop: conformal prediction in object detection
9.1Hardware and software independence9.2ASIL allocation to monitors9.3Implementation on safety microcontrollers9.4Monitors in hypervisors9.5Monitor latency requirements9.6Secure communication with the monitor9.7Automatic code generation9.8Testing of monitors9.9Configuration management9.10Lab: monitor on an AURIX microcontroller
10.1Event data recorders10.2DSSAD requirements10.3Selection of data to record10.4Monitor telemetry10.5Analysis of activations10.6Detection of new scenarios10.7Feedback to development10.8Privacy of recorded data10.9Response to field incidents10.10Practical exercise: analysis of monitor logs
11.1Monitors in ISO 2626211.2Monitors in ISO 2144811.3Requirements of UL 460011.4Safety argumentation with monitors11.5Coverage evidence11.6R157 requirements on DSSAD11.7Audits and independent assessment11.8Aviation standards as a reference11.9Certification trends11.10Workshop: GSN argument for monitoring
12.1Definition of the monitored system12.2Formal specification of properties12.3Design of perception monitors12.4Design of planning monitors12.5Safe-state strategy12.6Implementation and testing12.7Evaluation of coverage and false positives12.8Conclusions and future work12.9Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so the programme can be combined with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is RTAMT, Breach, ROS 2, CARLA and MATLAB/Simulink, in free, academic or evaluation versions. Exercises are based on real procedures for specifying monitors in STL logic, evaluating monitors in simulation and analysing activations in fleet data. Assessment is continuous by module, plus the final Master's Thesis.
Standards covered: ISO 26262, ISO 21448, UL 4600, ISO/PAS 8800, UN ECE R157, IEEE 2846, ISO 34503, IEC 61508.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- An internet connection and a computer capable of running the programme's software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with RTAMT, Breach, ROS 2, CARLA and MATLAB/Simulink, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme's software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in DMS/OMS and Driver Attention Engineering
Online master's programme of 1,900 hours in DMS/OMS and driver attention engineering: 12 modules covering in-cabin sensors, face and gaze analysis, drowsiness and distraction detection, occupant…
Master’s in Risk-Based Scenarios and PEGASUS-Like Engineering
Online master's programme of 1,900 hours in risk-based and PEGASUS-like scenario engineering, structured in 12 modules covering scenario sources and modelling, risk analysis, sampling and critical…
Master’s in Planning, Decision & Control Engineering
Online master's programme of 1,900 hours in planning, decision-making and control engineering for automated driving, structured in 12 modules covering decision and control architecture, route planning,…
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships