Cyber Security

Our society critically depends on cyber space for almost everything, including banking, transport & logistics, air travel, energy, telecommunications, flood defences, health care, email, social networks, and even warfare. The consequences of cyber security failures could be disastrous and the demand for cyber security specialists is therefore high and rising. The cyber security master specialization offers computer science master students the opportunity to become such a highly sought after cyber security specialist.

Cyber security Programme 2026-2027

The programme consists of:

  • Mandatory core and advanced specialization courses (e.g. cryptography, cyber data analytics, internet security, privacy enhancing technologies, secure data management, software security and security services for the Internet of Things).
  • A profiling space with a choice of technical and socio-technical electives
  • An individual final year project and the Computer Science course Computer Ethics, mandatory for all Master students CS.  

More information on the previous version, including the collaboration with the TUD, can be found in our archive or the Education and Examination Regulations of previous years. 

Core courses Computer Science 

The following courses are mandatory for all Computer Science Cyber Security students:

Core courses Cyber Security

The following 4 courses are mandatory:

  • 202600343 Internet Security (InS)
  • 202600275 Security and Cryptography (Crp)
  • 201600051 / 202600334 Software Security (SoS)
  • 202300047 AI for Security (AI4S, former Cyber Data Analytics (CDA))

Advanced cyber security courses

At least 4 courses should be chosen out of the following:

  • 201700083 / 202600360 Security Services for the Internet of Things (SSI)
  • 202600267 / 202600267 Security Verification (SeV)
  • 201700086 / 202600361 System Security (SyS)
  • 202600279 / 202600279 System Validation (SyV)
  • 202300046 / 202600338 Privacy Enhancing Technologies bootcamp (PET)
  • 201700079 / 202600344 Blockchain and Distributed ledger technology (BCT)
  • 201500040 Introduction to Biometrics (Bio)
  • 202600271 / 202600271 Secure Cloud Computing (SCC)
  • 202100073 / 202600336 Empirical Security Analysis & Engineering (ESA, note collaboration with Muenster, requires travel)
  • 202400121 / 202600366 Automated Vulnerability Research and Mitigation (AVRM)
  • 202500372 / 202600339 Quantum Computing and Post-Quantum Cryptography (QCPQC)

As of 2026 192110940 / 202600253 Secure Data Management (SDM) will be discontinued. Students with an interest in the area are recommended to take Secure Cloud Computing instead. If any students are disadvantaged or encounter problems because of the sudden discontinuation, they can contact the programme mentor of the Cyber Security specialisation.

Socio-Technical courses

At least 1 out of:

  • 202300044 / 202600274 Cyber Risk Management (CRM)
  • 201500038 E-Law (eLa)
  • 202500500 Economics of Cyber Security
  • 202400613 Security Experiments - Part I - Modelling Cyber Threats
  • 202400614 Security Experiments - Part II - Execution and Analysis

Profiling space

Suggested Electives:

  • 192620010 / 202600341 Mobile and Wireless Networking (MWN)
  • 202001472 / 202600334 Software Testing and Risk assessment (STAR)
  • 201400177 / 202600333 Cloud Networking (CIN)
  • 202500276 Machine Learning 1 (ML1)
  • 192130112 / 202600356 Distributed Systems (DiS)
  • 202001579 / 202600362 Internet Measurements (IMs)
  • 202600269 Advanced Networking (ANET)
  • 202000028 Smart Industry Systems (SIS)
  • 202300336 / 202600365 Explainable AI (XAI)
  • 202300300 Steganography and Data Forensics in Cybersecurity

EIT Digital & SPECTRO Cyber security 2025-2026

The requirements for the specialization in Cyber Security can also be fulfilled by completing the Cyber security programme EIT Digital & SPECTRO, one year of which takes place at the University of Twente.

The entry year of EIT Digital & SPECTRO Cyber Security follows the rules for the Master’s programme in Computer Science. The total amount of credits during the entry year must be at least 60 EC. The exit year is completed at a partner university and will consist of at least a graduation project and a minor in Innovation & Entrepreneurship (I&E). 

Entry year

Core courses

The following course is mandatory to all CS students:

the following 9 courses are mandatory for EIT entry year students:

  • 202600343 Internet Security (InS)
  • 202600275 Security and Cryptography (Crp)
  • 201600051 / 202600334 Software Security (SoS)
  • 202600272 I&E Basics: Innovation Management for EIT
  • 202600335 Business Development Lab I
  • 201700120 Business Development Lab II
  • 201700086 / 202600361 System Security (SyS)
  • 202300047 AI for Security (AI4S, former Cyber Data Analytics (CDA))
  • 202400627 I&E for Venture Creation (external summerschool) (4EC)

Advanced and profiling courses

At least 2 courses must be chosen out of the following advanced courses, elective I&E courses, or other suggested cyber security electives (see regular Cybsec programme):

Advanced courses

  • 202300044 / 202600274 Cyber Risk Management (CRM)
  • 201700083 / 202600360 Security Services for the Internet of Things (SSI)
  • 202600267 / 202600267 Security Verification (SeV)
  • 201500040 Introduction to Biometrics (Bio)
  • 202300046 / 202600338 Privacy Enhancing Technologies bootcamp (PET)
  • 201700079 / 202600344 Blockchain and Distributed ledger technology (BCT)
  • 201500038 E-Law (eLa)
  • 192620010 / 202600341 Mobile and Wireless Networking (MWN)
  • 202400121 / 202600366 Automated Vulnerability Research and Mitigation (AVRM)
  • 202500500 Economics of Cyber Security
  • 202500372 / 202600339 Quantum Computing and Post-Quantum Cryptography (QCPQC)

Additional Innovation and Entrepreneurship (I&E) electives.

Exit year

The following parts are mandatory:

For the remainder of the 60EC, the student needs to pick at least 15 EC from the following courses:

  • 202600271 Secure Cloud Computing (SCC)
  • 202600279 System Validation (SyV)
  • 202300044 / 202600274 Cyber Risk Management (CRM)
  • 202600267 Security Verification (SeV)
  • 201500040 Introduction to Biometrics (Bio)
  • 202500276 Machine Learning 1 (ML1)
  • 202600268 Internet of Things (IoT)
  • 201400177 / 202600333 Cloud Networking (ClN)
  • 192130112 / 202600356 Distributed Systems (DiS)
  • 201700079 / 202600344 Blockchain and Distributed ledger technology (BCT)
  • 192620010 / 202600341 Mobile and Wireless Networking (MWN)
  • 202300047 AI for Security (AI4S, former Cyber Data Analytics (CDA))
  • 201500038 E-Law (eLa)
  • 201700083 / 202600360 Security Services for the Internet of Things (SSI)
  • 202100073 / 202600336 Empirical Security Analysis & Engineering (ESA, note collaboration with Muenster, requires travel)
  • 202400121 / 202600366 Automated Vulnerability Research and Mitigation (AVRM)
  • 202500500 Economics of Cyber Security (EoS)
  • 202500372 / 202600339 Quantum Computing and Post-Quantum Cryptography (QCPQC)

Cum laude and graduation EIT

Exit year students follow the final project and graduation process at the UT, and afterwards receive their degree. In order to determine Cum Laude, their FP and grades during the year at the UT need to meet the cum laude requirements. Furthermore, if converted to the Dutch system, the grades at the entry university should also meet our requirements. 
Entry year students complete their graduation phase in their second year at one of the Exit partners and will likely write a thesis there, without direct supervision from a UT examiner. To obtain cum laude for their UT degree, students must have met our grade requirements in their first year. Furthermore, the thesis written at the exit university will be reviewed by at least one examiner from our programme to determine whether it meets our Cum Laude standards for the thesis. 
To start the diploma process, your transcript needs to be uploaded to the EIT portal by your exit university and both, entry and exit year togehter need to contain at least 120EC and cover all mandatory subjects (preferably 60 on either side). Furthermore, we request that you upload your thesis to our repository (use your programme mentor as supervisor). If you think you qualify for cum laude, also send the document to your UT programme mentor for review (cc BOZ, and eit-eemcs). Upon receiving the transcript and thesis, BOZ will initiate the degree process, and you will be informed of the steps and procedures for obtaining your documents.

Programme mentor

dr.ing. F.W. Hahn (Florian)
Programme mentor Cyber Security

Study advisor

S.S. Spuls MSc (Sanne)
Study adviser Master Computer Science

Make an appointment via https://eemcs.planner.utwente.nl/

Sanne is the main contact person for cohorts 2024-2025 and prior, 2026-2027 and premasters.

Cohort 2025-2026 can contact Rianne de Jong.

dr.ir. R. de Jong (Rianne)
Study adviser Master (and Bachelor) Computer Science

Make an appointment via https://eemcs.planner.utwente.nl/

Rianne is the main contact person for cohort 2025-2026.
Cohorts 2024-2025 and prior and premasters can contact Sanne Spuls.