MSc Cyber Security (Software Security)

New approaches to building software, such as continuous delivery cloud-based scalability, and Open Source have accelerated technological innovation. Modern software now underpins vast, complex systems across society, from energy and finance to healthcare and smart transport. This new software ecosystem has also given rise to new forms of security threats, malware and system vulnerabilities. There is also now a heightened need from end-users, regulators and other stakeholders for accountability, privacy, and demonstrable and effective data protection measures from developers. The consequence is an increased worldwide demand for software security experts who are able to understand the security challenges that modern software brings and offer strong solutions to mitigate harm to valuable software-enabled infrastructures. There is a major shortage of software security experts with the skills required to protect software-intensive businesses from disruption that can have large-scale impacts on society and massive business losses. A strong ethos of rigorous experimental and empirical cybersecurity and privacy research underpins the MSc, facilitated by a state-of-the-art testbed for studying threats and vulnerabilities related to data flows in the software and its dependencies (supply chain), critical national infrastructure (CNI) and Internet of Things (IoT). Leveraging our bespoke teaching equipment, you'll learn to apply foundational software techniques necessary to protect often interdependent software systems and will develop the skills for engineering scalable solutions. You'll be exposed to real-world problems that are practical and challenge-oriented but underpinned by rigorous research. This MSc aims to: Enable a deep understanding of fundamental concepts, design principles, building blocks and methods to understand and mitigate against cyber threats that impact critical and complex software systems. Give you hands-on experience in articulating software security issues by working with devices, systems and networks utilised in realistic environments such as state-of-the-art testbeds for inter-meshed systems, CNI and IoT. Equip you with the ability to apply these security principles in analysing cybersecurity problems and challenges from a variety of vantage points: networks, systems, human factors and risk, control systems and Internet of Things devices, reason about the security and privacy properties of underlying software and implications in large-scale and inter-meshed settings. Enable you to apply secure software engineering principles and lifecycle to design and implement software solutions that proactively and reactively address security and privacy issues by default. Provide you with the skills to reason critically about complex problems that require evaluation and analysis from a multi-dimensional perspective including technical, human and organisational aspects.

You will typically need an upper second-class honours degree or international equivalent in Computer Science, Electrical or Electronic Engineering, Cyber Security, Information Security or Software Engineering, while other disciplines will be considered on a case-by-case basis. Applicants from other related subjects are required to have studied modules relevant to the programme at a minimum of 60%, or international equivalent, including relevant modules such as Algorithms, Cloud Native Systems, Computer Security, Continuous Integration Continuous Deployment/Delivery (CICD), Data Privacy/Security, Data Structures, Databases/Structured/Unstructured Databases, DevOps, JavaScript, Network Security, Operating Systems, Programming (1 from the list below), Requirements Engineering, Secure Coding, Service Orientated Architectures, Software Maintenance, Software Analysis, Software Architecture, Software Design, Software Development, Software Process, Software Security, Software Tools, Structured Programming, System Security, Systems Analysis, Systems Development, Systems Engineering, Systems Programming, Unstructured Programming, or Web applications. Suitable Programming modules require one module from the following list: Ansible, Assembly Language, C/C ++, Cloud Computing, Docker, Java, Kubernetes, Machine Learning Fundamentals, Object Orientated Programming, Parallel Programming, Problem Solving & Programming, Programming Fundamentals, Programming Lab, Python, Scala, Serverless computing, Shell Scripting, or Terrafoam. MATLAB, FORTRAN, Basic or Visual Basic will not be considered suitable for this programme.