An applied Swiss-inspired curriculum combining algorithmic rigour, systems architecture, digital trust and practical engineering capability for modern technology leaders.
The BSc in Cybersecurity at Brookfield School of Computing is engineered to provide deep competency across core computer science, systems design, and targeted domain applications. Students develop fluency in software craftsmanship, distributed architectures, algorithm optimization, and data governance.
Instruction balances rigorous theoretical foundations with practical code repositories, laboratory simulations, and ethical technology review aligned with modern international computing standards.
| Code | Module Title | Type | Discipline & Learning Outcome |
|---|---|---|---|
| SEC101 | Principles of Information Assurance & Threat Modeling | Theory | Evaluate confidentiality, integrity and availability (CIA), adversary threat actors and attack surface modeling in Cybersecurity. |
| SEC102 | Python for Security Automation & Scripting Lab | Practical | Automate vulnerability banner grabbing, log parsing, port scanning and automated threat reporting using Python. |
| SEC103 | Discrete Mathematics & Number Theory for Cryptography | Theory | Solve modular arithmetic congruences, prime factorization, Fermat's little theorem and discrete logarithm problems. |
| SEC104 | Computer Systems Architecture & Memory Security Lab | Practical | Analyze buffer overflows, stack smashing, memory layout vulnerabilities and execute ASLR and DEP mitigations. |
| SEC105 | Computer Networking Protocols, Packets & Traffic Analysis | Theory | Deconstruct TCP three-way handshakes, UDP datagrams, ICMP anomalies, DNS routing and TLS handshakes. |
| SEC106 | Network Traffic Analysis & Wireshark Deep Inspection Lab | Practical | Capture and inspect network PCAP streams, reconstruct hijacked sessions and detect packet anomalies in Wireshark. |
| SEC107 | Cyber Law, Ethics & Responsible Disclosure Frameworks | Theory | Analyze legal computer fraud statutes, Swiss cyber crime legislation, ethical penetration testing contracts and disclosure norms. |
| SEC108 | Linux Hardening & Systems Administration Lab | Practical | Harden Linux servers by configuring PAM modules, SSH key pairs, iptables firewalls, AppArmor and sudo limits. |
| SEC109 | Technical Communication & Incident Documentation in Cybersecurity | Theory | Document vulnerability disclosures, executive risk summaries, mitigation roadmaps and technical compliance briefs. |
| Code | Module Title | Type | Discipline & Learning Outcome |
|---|---|---|---|
| SEC201 | Cryptographic Algorithms, Symmetric & Asymmetric Primitives | Theory | Formulate AES block cipher modes, RSA key generation, Diffie-Hellman exchanges and SHA-256 hash hashing. |
| SEC202 | Applied Cryptography Implementation & Key Management Lab | Practical | Implement digital signature verification, asymmetric key generation and OpenSSL certificate authorities. |
| SEC203 | Operating System Security & Kernel Defense Architectures | Theory | Analyze kernel ring privileges, system call interception, mandatory access controls (SELinux) and rootkit mechanics. |
| SEC204 | Relational Database Security & SQL Injection Mitigation Lab | Practical | Simulate SQL injection attacks, deploy parameterized prepared statements and configure database column encryption. |
| SEC205 | Defensive Architecture, Firewalls & Next-Gen IDS/IPS | Theory | Design defense-in-depth perimeters, stateful packet inspection firewalls, Snort signatures and DMZ enclaves. |
| SEC206 | Snort Rules, Suricata & Network Intrusion Detection Lab | Practical | Write custom Snort and Suricata signature rules, analyze live interface traffic and block adversary command-and-control. |
| SEC207 | Web Application Security & OWASP Top 10 Vulnerabilities | Theory | Audit web applications against XSS, CSRF, broken access control, server-side request forgery (SSRF) and IDOR. |
| SEC208 | Web Application Penetration Testing & Burp Suite Lab | Practical | Intercept HTTP requests, map web application attack surfaces and exploit injection vulnerabilities in Burp Suite. |
| SEC209 | Applied Cybersecurity First-Year Practicum: Defensive Hardening | Practical | Harden a vulnerable enterprise network environment and successfully defend against automated attack simulations. |
| Code | Module Title | Type | Discipline & Learning Outcome |
|---|---|---|---|
| SEC301 | Public Key Infrastructure (PKI), TLS & Digital Trust | Theory | Architect enterprise certificate authorities, CRL validation, OCSP stapling and zero-trust mutual TLS (mTLS). |
| SEC302 | Enterprise PKI Deployment & Certificate Authority Lab | Practical | Deploy a two-tier offline root and issuing CA hierarchy with automated certificate issuance via ACME protocols. |
| SEC303 | Digital Forensics Principles & Chain of Custody Standards | Theory | Apply forensic legal admissibility standards, ISO/IEC 27037 digital evidence handling and courtroom chain of custody. |
| SEC304 | Digital Evidence Acquisition & Disk Imaging Lab (FTK / Autopsy) | Practical | Acquire bit-stream raw/E01 disk images, calculate cryptographic hashes and carve deleted artifacts in Autopsy. |
| SEC305 | Malware Analysis Foundations & Disassembly Principles | Theory | Deconstruct portable executable (PE) headers, DLL imports, packing obfuscation, API hooking and behavioral evasion. |
| SEC306 | Static & Dynamic Malware Triage Lab (Ghidra & Cuckoo) | Practical | Disassemble malicious binaries in Ghidra, analyze x86 assembly call trees and execute sandbox behavioral triage. |
| SEC307 | Identity & Access Management (IAM) & Directory Services | Theory | Model RBAC, ABAC, Kerberos ticket granting, Active Directory domain architecture and SAML/OIDC federations. |
| SEC308 | Active Directory Attack & Defense Workshop | Practical | Execute and mitigate Kerberoasting, Pass-the-Hash, BloodHound privilege paths and Group Policy security baselines. |
| SEC309 | Security Research Methodologies & Quantitative Risk Modeling | Theory | Formulate quantitative Monte Carlo risk models, FAIR risk frameworks and statistical threat modeling methodologies. |
| Code | Module Title | Type | Discipline & Learning Outcome |
|---|---|---|---|
| SEC401 | Security Operations Center (SOC) Engineering & SIEM Systems | Theory | Architect SOC workflows, log aggregation architectures, threat intelligence ingestion and event correlation rules. |
| SEC402 | Elastic SIEM / Splunk Event Correlation & Threat Triage Lab | Practical | Ingest multi-source syslog and Windows Event logs into Elastic/Splunk and construct correlation alert queries. |
| SEC403 | Cloud Security Architecture, Shared Responsibility & CSPM | Theory | Evaluate AWS/Azure shared responsibility models, IAM privilege escalation, bucket leaks and cloud posture baselines. |
| SEC404 | Cloud Security Posture Management (CSPM) & Audit Lab | Practical | Deploy automated cloud security benchmarks, audit S3 bucket ACLs and remediate IAM policy vulnerabilities. |
| SEC405 | Incident Response Lifecycles, NIST 800-61 & Threat Hunting | Theory | Coordinate preparation, identification, containment, eradication and recovery phases under NIST/SANS frameworks. |
| SEC406 | Threat Hunting with MITRE ATT&CK & Memory Forensics Lab | Practical | Analyze volatile memory dumps using Volatility 3 to uncover stealthy code injection, DLL hijacks and hidden processes. |
| SEC407 | DevSecOps: Shift-Left Security & CI/CD Pipeline Integration | Theory | Incorporate automated SAST, DAST, dependency vulnerability scanning and secrets detection into agile pipelines. |
| SEC408 | Automated Vulnerability Scanning & Toolchain Integration Lab | Practical | Configure automated Trivy container scans, SonarQube quality gates and OWASP ZAP baseline scans in CI/CD. |
| SEC409 | Industrial Cybersecurity Team Project: Red Team vs Blue Team Studio | Practical | Execute a collaborative live cyber range exercise conducting offensive adversary emulation and defensive incident triage. |
| Code | Module Title | Type | Discipline & Learning Outcome |
|---|---|---|---|
| SEC501 | Information Security Governance, Risk & Swiss Compliance (GRC) | Theory | Implement ISO/IEC 27001 ISMS controls, NIST Cybersecurity Framework and Swiss Federal Data Protection Act (FADP). |
| SEC502 | Advanced Penetration Testing & Exploit Development Lab | Practical | Engineer custom buffer overflow shellcode, bypass AV/EDR detection mechanisms and exploit complex network targets. |
| SEC503 | Critical Infrastructure, Industrial Control Systems & SCADA Security | Theory | Analyze Modbus/DNP3 protocols, programmable logic controllers (PLCs), Purdue model architecture and ICS threat vectors. |
| SEC504 | ICS / SCADA Attack Simulation & Defense Lab | Practical | Simulate industrial control network attacks, analyze PLC telemetry and implement network segmentations and honeypots. |
| SEC505 | Threat Intelligence Platforms (TIP), STIX/TAXII & MISP | Theory | Structure open-source threat intelligence, IOC indicators, adversary campaign tracking and threat sharing protocols. |
| SEC506 | Automated Security Orchestration, Automation & Response (SOAR) Lab | Practical | Construct automated incident response playbooks to isolate infected endpoints and revoke compromised user credentials. |
| SEC507 | Enterprise Zero-Trust Architecture & Software-Defined Perimeter | Theory | Architect NIST SP 800-207 zero-trust principles: continuous verification, least privilege and microsegmentation. |
| SEC508 | Zero-Trust Network Access (ZTNA) & Microsegmentation Lab | Practical | Implement identity-aware proxies, contextual device health posture checks and granular application microsegmentation. |
| SEC509 | Senior Cybersecurity Capstone Project: Threat Model & Defense Design | Practical | Author comprehensive threat models, MITRE ATT&CK coverage maps and defensive architectural blueprints. |
| Code | Module Title | Type | Discipline & Learning Outcome |
|---|---|---|---|
| SEC601 | Post-Quantum Cryptography & Future Horizons in Cyber Defense | Theory | Evaluate lattice-based, code-based and hash-based post-quantum cryptographic standards (NIST PQC) and migrations. |
| SEC602 | Senior Cybersecurity Capstone Project: Defensive Engineering Build | Practical | Construct and configure the production-grade defensive infrastructure, SIEM correlation rules and automated mitigations. |
| SEC603 | Senior Cybersecurity Capstone Project: Penetration Testing & Validation | Practical | Execute rigorous penetration testing and adversarial validation to confirm defensive resilience across all controls. |
| SEC604 | Executive Cybersecurity Leadership & Boardroom Communication | Theory | Present technical cyber risk, breach probability, regulatory liability and security ROI to C-suite executive boards. |
| SEC605 | Production Security Hardening & Zero-Downtime Resilience Lab | Practical | Execute red team resilience exercises, automated incident response drills and failover disaster recovery procedures. |
| SEC606 | Societal Impact, Surveillance Ethics & Cyber Geopolitics | Theory | Analyze nation-state cyber warfare, surveillance capitalism, digital civil liberties and international cyber diplomacy. |
| SEC607 | Industry Technical Security Portfolio & Threat Defense Audit | Practical | Defend technical vulnerability findings, hardening roadmaps and compliance documentation before an industry review board. |
| SEC608 | Peer Review, Threat Disclosure & Scientific Dissemination | Theory | Author CVE vulnerability reports, MITRE advisory write-ups and peer-reviewed technical whitepapers. |
| SEC609 | Final Cybersecurity Capstone Project Demonstration & Oral Defense | Practical | Demonstrate the operational security defense system and pass an oral academic dissertation examination in Cybersecurity. |
Secondary School Diploma / Swiss Matura / International Baccalaureate or recognized foreign upper-secondary certificate. English proficiency IELTS 6.0+ or equivalent.
Brookfield School of Computing is an independent private education institution in formation. Academic programmes, entry requirements, fees and awards are subject to institutional review and applicable Swiss legal regulations.