Apply now
Postgraduate DiplomaElectronics, Embedded Systems & Telecom Applications open

Postgraduate Diploma in Interface Security and Rate-Limiting

Online postgraduate diploma of 800 hours in interface security and rate-limiting. 8 modules covering the attack surface of interfaces, authentication and authorisation, input validation, rate-limiting algorithms, abuse and DoS protection, gateways and API management and compliance and verification, with an assigned technical tutor.

Duration800 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Model threats to device and service interfaces.

02

Implement robust authentication with OAuth 2.0 and mutual TLS.

03

Validate inputs and protect parsers against malicious data.

04

Design local and distributed rate-limiting algorithms.

05

Mitigate denial-of-service attacks and abuse.

06

Configure gateways with security and quota policies.

07

Verify compliance with ETSI EN 303 645 and IEC 62443.

Profile

Who it's for

  • Product security engineers.
  • API penetration testers.
  • IoT security architects.
  • API platform engineers.
  • Industrial cybersecurity analysts.
  • DevSecOps engineers.
  • Engineering or science graduates aiming to enter the IoT device sector.
Standards & tools

What you'll work with

  • ETSI EN 303 645 (cyber security for consumer Internet of Things)
  • IEC 62443-4-2 (technical security requirements for IACS components)
  • OWASP API Security Top 10 (2023) (most critical API security risks)
  • Regulation (EU) 2024/2847 (Cyber Resilience Act) (horizontal cybersecurity requirements for products with digital elements)
  • IETF RFC 6749 (OAuth 2.0) (OAuth 2.0 authorisation framework)
  • IETF RFC 6585 (HTTP 429) (additional HTTP status codes, including 429 Too Many Requests)
  • OWASP ASVS 4.0 (Application Security Verification Standard)
  • NIST SP 800-207 (zero trust architecture)
  • Kong Gateway
  • Envoy Proxy
  • OWASP ZAP
  • k6
  • Redis
Syllabus

8 modules · 800 h

  1. 1.1Exposed interfaces: APIs, ports and buses
  2. 1.2Threat modelling with STRIDE
  3. 1.3OWASP API Security Top 10 classification
  4. 1.4JTAG and UART debug interfaces
  5. 1.5Attack surfaces in gateways and edge devices
  6. 1.6Assets, actors and trust boundaries
  7. 1.7Data flow analysis
  8. 1.8Risk prioritisation with CVSS
  9. 1.9Derived security requirements
  10. 1.10Workshop: threat model of an IoT gateway
  1. 2.1OAuth 2.0 and device flows
  2. 2.2OpenID Connect and identity tokens
  3. 2.3JWT: signing, validation and expiry
  4. 2.4X.509 certificates and mutual TLS
  5. 2.5Credentials in secure elements
  6. 2.6RBAC and ABAC access control
  7. 2.7Scopes and the principle of least privilege
  8. 2.8Credential rotation and revocation
  9. 2.9Common errors: BOLA and BFLA
  10. 2.10Practical exercise: mutual TLS on an MQTT broker
  1. 3.1Schema validation at the edge
  2. 3.2Injection in parameters and headers
  3. 3.3Risks of insecure deserialisation
  4. 3.4Payload size and depth limits
  5. 3.5Canonicalisation and character encoding
  6. 3.6Protection against SSRF
  7. 3.7Sanitisation in resource-constrained firmware
  8. 3.8Secure error and message handling
  9. 3.9Fuzzing network interfaces
  10. 3.10Lab: fuzzing a CBOR parser
  1. 4.1Token bucket and leaky bucket
  2. 4.2Fixed window and sliding window
  3. 4.3Approximate counters and sliding log
  4. 4.4Quotas per client, key and endpoint
  5. 4.5Distributed rate-limiting with Redis
  6. 4.6RateLimit headers and the 429 response
  7. 4.7Retry-After and exponential backoff with jitter
  8. 4.8Rate-limiting in devices and firmware
  9. 4.9Fairness and traffic prioritisation
  10. 4.10Practical exercise: token bucket limiter in Go
  1. 5.1Volumetric and application-layer attacks
  2. 5.2Layer 4 and layer 7 mitigation
  3. 5.3Circuit breakers and bulkheads
  4. 5.4Load shedding and bounded queues
  5. 5.5Bot detection and credential stuffing
  6. 5.6WAF and OWASP ModSecurity CRS rules
  7. 5.7Protecting MQTT and CoAP brokers
  8. 5.8Load testing with k6
  9. 5.9Incident response plans
  10. 5.10Case study: mitigating an abuse spike
  1. 6.1Functions of an API gateway
  2. 6.2Kong, Envoy and NGINX as control points
  3. 6.3Declarative security policies
  4. 6.4API key and plan management
  5. 6.5Observability: logs, metrics and traces
  6. 6.6Traffic anomaly detection
  7. 6.7Service mesh and mTLS between services
  8. 6.8Configuration as code and GitOps
  9. 6.9Access auditing and traceability
  10. 6.10Lab: quota policies in Kong
  1. 7.1ETSI EN 303 645 requirements
  2. 7.2Cyber Resilience Act and manufacturer obligations
  3. 7.3IEC 62443-4-2 for components
  4. 7.4OWASP ASVS as a verification checklist
  5. 7.5API penetration testing
  6. 7.6Static and dynamic security analysis
  7. 7.7Vulnerability management and disclosure
  8. 7.8Documenting security evidence
  9. 7.9Security posture metrics
  10. 7.10Case study: audit of a device API
  1. 8.1Inventory of system interfaces
  2. 8.2Complete threat model
  3. 8.3Authentication and authorisation design
  4. 8.4Implementation of rate-limiting and quotas
  5. 8.5Fuzzing and penetration testing
  6. 8.6Assessment against ETSI EN 303 645
  7. 8.7Response and monitoring plan
  8. 8.8Residual risk report
  9. 8.9Report and presentation
  10. 8.10Final project: final review with your tutor
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: you progress at your own pace within each intake, so you can combine it with your job.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Kong Gateway, Envoy Proxy, OWASP ZAP, k6 and Redis, in free, academic or evaluation versions. Testing is studied through real procedures for fuzzing of device network interfaces, load and abuse testing on gateways and authentication and access control audits. Assessment is continuous by module, plus the final project.

Standards covered: ETSI EN 303 645, IEC 62443-4-2, OWASP API Security Top 10 (2023), Regulation (EU) 2024/2847 (Cyber Resilience Act), IETF RFC 6749 (OAuth 2.0), IETF RFC 6585 (HTTP 429), OWASP ASVS 4.0, NIST SP 800-207.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of ETSI EN 303 645, IEC 62443-4-2 and the OWASP API Security Top 10 (2023) applied to real cases, not as a theoretical annex.
Industry software:Kong Gateway, Envoy Proxy, OWASP ZAP, k6 and Redis, in free, academic or evaluation versions.
Final project:a complete secure interface, from interface inventory and threat model to authentication, rate-limiting and quotas, fuzzing and penetration testing and assessment against ETSI EN 303 645, reviewed by your tutor.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Interface inventory and threat model
Inventory the system interfaces and build the complete threat model.
Authentication and authorisation
Design authentication and authorisation for every exposed interface.
Rate-limiting and quotas
Implement rate-limiting and quotas and test them under load.
Testing and compliance
Run fuzzing and penetration tests and assess the system against ETSI EN 303 645.
Final project
Present the documented project, with the response plan and residual risk report, to your tutor.
Career opportunities

Where this takes you

Product security engineerAPI penetration testerIoT security architectAPI platform engineerIndustrial cybersecurity analystDevSecOps engineer
Admissions & scholarships

Requirements

  • Prior technical training or professional experience in the sector. No university degree is required.
  • Internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with Kong Gateway, Envoy Proxy, OWASP ZAP, k6 and Redis, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.

Prior technical training or professional experience in the sector (no university degree required), a computer able to run the programme software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Keep exploring

Related programmes

See all in Electronics, Embedded Systems & Telecom
Postgraduate Diploma1,670 $

Diploma in HPC Station Design and Safety

Online postgraduate diploma of 800 hours in HPC charging station design and safety. 8 modules covering high-power charging architecture, charger power electronics, vehicle-charger communication, electrical safety,…

6–8 monthsOnlineElectronics, Embedded Systems & Telecom
Postgraduate Diploma1,670 $

Postgraduate Diploma in CI/CD for Embedded Systems and HIL Farms

Online 800-hour Postgraduate Diploma in CI/CD for Embedded Systems and HIL Farms. 8 modules covering ISO 26262-8, Automotive SPICE 4.0 and Jenkins. Assigned tutor and enrolment…

800 hOnlineElectronics, Embedded Systems & Telecom
Postgraduate Diploma1,670 $

Postgraduate Diploma in Cloud-Edge Architectures for IoT

Online Postgraduate Diploma of 800 hours in Cloud-Edge Architectures for IoT. 8 modules covering ISO/IEC 30141, OASIS MQTT 5.0 and Kubernetes K3s. Assigned tutor and open…

800 hOnlineElectronics, Embedded Systems & Telecom
Postgraduate Diploma in Interface Security and Rate-LimitingEnrol
Related programmes

More in Electronics, Embedded Systems & Telecom

Postgraduate Diploma in Edge-Cloud Sync and Data ContractsView programme →Postgraduate Diploma in Ultra-Low-Power and Energy ManagementView programme →Postgraduate Diploma in Deterministic Design in OTView programme →TSN Diploma on Industrial EthernetView programme →Postgraduate Diploma in TSN Profiles and ConformanceView programme →Diploma in Thermal Management and InsulationView programme →

All Electronics, Embedded Systems & Telecom programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.