Cybersecurity course on UAVs
Online course of 300 hours in UAV cybersecurity, structured in 6 modules covering the UAV attack surface, link and protocol security, firmware and hardware security, ground station and cloud security, and governance and compliance, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the attack surface of UAS systems.
Apply threat modelling methodologies.
Protect command, control and payload links.
Implement security measures in firmware and hardware.
Secure ground stations and cloud services.
Interpret the requirements of Part-IS, NIS2 and the Cyber Resilience Act.
Design cybersecurity incident response plans.
Who it's for
- Aviation cybersecurity analysts.
- Embedded systems security engineers.
- Information security auditors.
- Security managers at UAS operators.
- NIS2 compliance consultants.
- Vulnerability researchers.
- Engineering or science graduates looking to move into cybersecurity.
What you'll work with
- Delegated Regulation (EU) 2022/1645 (Part-IS, information security in aviation)
- Implementing Regulation (EU) 2023/203 (information security requirements for organisations and authorities)
- Directive (EU) 2022/2555 (NIS2, cybersecurity of network and information systems)
- Regulation (EU) 2024/2847 (Cyber Resilience Act)
- ISO/IEC 27001 (information security management systems)
- RTCA DO-326A (airworthiness security process)
- ED-202A (airworthiness security process specification)
- Royal Decree 311/2022 (Spanish National Security Framework)
- Wireshark
- Ghidra
- Kali Linux
- Microsoft Threat Modeling Tool
- GNU Radio
6 modules
1.1UAS system architecture from a security perspective1.2Assets: aircraft, ground station, links and cloud1.3Threat modelling with STRIDE1.4Threat actors and motivations1.5Known vulnerabilities in commercial drones1.6Hardware and software supply chain1.7Privacy risks of captured data1.8Impact on operational safety1.9European aviation cybersecurity framework1.10Case study: threat modelling of an inspection drone
2.1Weaknesses of unsigned MAVLink2.2MAVLink 2 message signing2.3Encryption of video and telemetry links2.4Wi-Fi deauthentication attacks2.5Ground station spoofing2.6GNSS jamming and spoofing2.7Remote identification and its privacy2.8Security in cellular networks2.9Key management2.10Lab: MAVLink traffic analysis with Wireshark
3.1Secure boot and chain of trust3.2Signing of firmware updates3.3Protection of debug ports3.4Secure elements and TPM3.5Binary analysis3.6Fuzz testing3.7Security in embedded operating systems3.8Vulnerability management3.9Software bill of materials (SBOM)3.10Workshop: firmware signature verification
4.1Hardening of control stations4.2Mobile control applications4.3Manufacturer cloud services4.4Data transfer and sovereignty4.5Access control and authentication4.6Event logging and monitoring4.7Security of interfaces with USSPs4.8Incident response4.9Continuity of operations4.10Practical: hardening a ground station
5.1Information security management in aviation5.2EASA Part-IS regulation5.3The NIS2 Directive and operators5.4Spanish National Security Framework (ENS)5.5Product certification under the Cyber Resilience Act5.6Supplier assessment5.7Authorised penetration testing and its ethics5.8Training and awareness5.9Cybersecurity audit5.10Case study: response plan for a link hijacking incident
6.1Description of the system6.2Threat modelling6.3Risk analysis6.4Design of controls6.5Security testing plan6.6Incident management6.7Compliance plan6.8Improvement roadmap6.9Report and presentation6.10Final project: final review with the tutor
How you'll learn
Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so you can combine it with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Ghidra, Kali Linux, Microsoft Threat Modeling Tool and GNU Radio, in free, academic or evaluation versions. Tests are studied on real procedures for threat modelling of UAS systems, link traffic analysis and laboratory firmware security reviews. Assessment is continuous by module plus the final integrated project.
Standards covered: Delegated Regulation (EU) 2022/1645 (Part-IS), Implementing Regulation (EU) 2023/203, Directive (EU) 2022/2555 (NIS2), Regulation (EU) 2024/2847 (Cyber Resilience Act), ISO/IEC 27001, RTCA DO-326A, ED-202A and Royal Decree 311/2022.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- No prior qualification is required.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours over 3 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Ghidra, Kali Linux, Microsoft Threat Modeling Tool and GNU Radio, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute certificate, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
No prior qualification is required; you need an internet connection, a computer capable of running the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Lightning protection course for airplanes
Online course of 300 hours in aircraft lightning protection: 6 modules covering lightning phenomenology, zoning and the standardised environment, direct-effects protection, fuel system protection, indirect effects…
TT&C (Telemetry and Control) Course
Online course of 300 hours in TT&C (telemetry, tracking and command): 6 modules covering TT&C subsystem architecture, modulation and coding, space data protocols, tracking and ranging,…
Regulatory policy course for UAM
Online course of 300 hours in regulatory policy for UAM: 6 modules covering aviation policy fundamentals, the European and international UAM regulatory frameworks, urban and social…
More in Aerospace, UAM, Drones & Space
All Aerospace, UAM, Drones & Space programmes → · How to apply · Fees & financing · Scholarships