Cybersecurity course in avionics
Online course of 300 hours in avionics cybersecurity, structured in 6 modules covering threats to aeronautical systems, the DO-326A airworthiness security process, DO-356A risk assessment, technical protection measures and Part-IS, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the cybersecurity threats affecting connected aircraft.
Apply the airworthiness security process defined in DO-326A.
Assess cybersecurity risks using the DO-356A methods.
Design technical protection measures for on-board systems.
Manage continuing airworthiness in security matters.
Know the obligations of the Part-IS regulation.
Produce a complete cybersecurity analysis of an aeronautical system.
Who it's for
- Aeronautical cybersecurity engineers.
- Information security risk analysts moving into aviation.
- Security certification engineers.
- Avionics systems architects designing connected equipment.
- Information security managers in aviation organisations.
- Part-IS security auditors.
- Engineering or science graduates aiming to work for aircraft manufacturers.
What you'll work with
- RTCA DO-326A / EUROCAE ED-202A (airworthiness security process specification)
- RTCA DO-356A / EUROCAE ED-203A (airworthiness security methods and considerations)
- RTCA DO-355A / EUROCAE ED-204A (information security guidance for continuing airworthiness)
- Commission Delegated Regulation (EU) 2022/1645 (Part-IS)
- Commission Implementing Regulation (EU) 2023/203 (Part-IS for authorities and organisations)
- EASA AMC 20-42 (airworthiness information security risk assessment)
- ARINC 811 (commercial aircraft information security concepts)
- ISO/IEC 27001:2022 (information security management systems)
- Wireshark
- Microsoft Threat Modeling Tool
- Kali Linux
- Nessus
- Ansys medini analyze
6 modules
1.1Attack surface of a connected aircraft1.2Aircraft control, AISD and PIESD network domains1.3Threat actors and motivations1.4Physical, wireless and supply-chain vectors1.5Vulnerabilities in ADS-B and ACARS links1.6Software and data loading risks1.7Incidents and public demonstrations1.8The difference between safety and security1.9Cybersecurity at airports and on the ground1.10Case study: threats to a single-aisle aircraft
2.1The DO-326A framework and its activities2.2Security scope and perimeter2.3Plan for Security Aspects of Certification (PSecAC)2.4Preliminary risk assessment2.5Security assurance levels2.6Security requirements and their verification2.7Coordination with the ARP4754B process2.8Authority special conditions2.9Certification documentation2.10Workshop: security scope of a connected system
3.1DO-356A methods for assessing risk3.2Identifying assets and scenarios3.3Estimating attack potential3.4Severity of safety effects3.5Risk acceptability matrices3.6Attack trees3.7STRIDE threat modelling3.8Security measures and their effectiveness3.9Residual risk and justification3.10Lab: attack tree for a software load
4.1Network segmentation and firewalls4.2Data diodes and gateways4.3Digital signing of software parts4.4Secure boot and root of trust4.5Link encryption and authentication4.6On-board intrusion detection4.7Key and certificate management4.8Operating system hardening4.9Security of EFBs and portable devices4.10Practical exercise: designing a software signing scheme
5.1DO-355A requirements in operation5.2Fleet vulnerability management5.3Security incident response5.4Part-IS regulation for organisations5.5Information security management system5.6Incident reporting to the authority5.7Supply-chain security5.8Penetration testing and audits5.9Staff training and awareness5.10Case study: responding to a published vulnerability
6.1Description of the system and its environment6.2Definition of the security perimeter6.3Identification of assets and threats6.4Documented risk assessment6.5Architecture of protection measures6.6Security verification plan6.7Continuing airworthiness procedures6.8Conclusions and residual risk6.9Report and presentation6.10Final project: final review with the tutor
How you'll learn
100% online training on the SEIUM Institute campus, with downloadable materials, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme is compatible with full-time work.
Each module combines theory, guided reading of the original standards and applied exercises. The working software is Wireshark, Microsoft Threat Modeling Tool, Kali Linux, Nessus and Ansys medini analyze, in free, academic or evaluation versions. Practical work is based on real procedures: risk analysis of a connected cabin system, attack tree modelling and assessment of protection measures for software loading. Assessment is continuous by module, plus a final capstone project.
Standards covered: RTCA DO-326A / EUROCAE ED-202A, RTCA DO-356A / EUROCAE ED-203A, RTCA DO-355A / EUROCAE ED-204A, Commission Delegated Regulation (EU) 2022/1645, Commission Implementing Regulation (EU) 2023/203, EASA AMC 20-42, ARINC 811, ISO/IEC 27001:2022.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- No prior qualification is required.
- An internet connection and a computer able to run the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours over 3 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Microsoft Threat Modeling Tool, Kali Linux, Nessus and Ansys medini analyze, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute certificate, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
No prior qualification is required; you need an internet connection, a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Functional safety course in avionics
Online course of 300 hours in functional safety in avionics. 6 modules covering safety in aeronautical systems, functional hazard assessment, preliminary and system safety analysis, common…
Course in the Future of Aerospace Simulation
Online course of 300 hours in the future of aerospace simulation, with 6 modules covering the state of the art, digital twins, surrogate models and machine…
UAV Maintenance Course
Online course of 300 hours in UAV maintenance, structured in 6 modules covering maintenance organisation, structures and propulsion, electrical systems and batteries, avionics and software, and…
More in Aerospace, UAM, Drones & Space
All Aerospace, UAM, Drones & Space programmes → · How to apply · Fees & financing · Scholarships