MSc in Applied Cybersecurity

The MSc in Applied Cybersecurity, offered by the School of Science and Technology at Deree, The American University of Greece, is a one-year, full-time graduate program (with a part-time option) designed to shape the next generation of cybersecurity leaders. The program is delivered exclusively in English and face-to-face, and consists of 11 mandatory courses totaling 33 US Credits / 66 ECTS, distributed across three academic terms (Fall, Winter, Spring). 

Built around the guiding principle of "Protecting without disrupting," the curriculum integrates technical expertise, ethical awareness, legal literacy, theoretical depth, and hands-on practice. Students gain in-depth knowledge of network protocols and cloud infrastructures, operating systems security, digital forensics, applied cryptography, penetration testing and ethical hacking, AI in cybersecurity, intrusion detection and incident response, cybersecurity law and compliance (GDPR, ENISA, ISO 27001, NIST), and risk assessment and policy. 

The program is built on three pillars: faculty who combine strong academic credentials with real industry experience; up-to-date curricula focused on building a cybersecurity mindset through cloud labs, hands-on exercises and real case studies; and close ties with industry, including the participation of major sector companies in the program’s design and ongoing evolution. Through the College’s Research, Technology & Innovation Network (RTIN), students can actively participate in industry and European research projects, gaining valuable professional experience during their studies. 

Cybersecurity is one of the fastest-growing and most critical fields in the global economy. The worldwide cybersecurity market is projected to grow from approximately $172 billion in 2023 to nearly $425 billion by 2030, with employment in cybersecurity roles expected to rise by 35% by 2031 and around 3.5 million unfilled positions worldwide. The MSc in Applied Cybersecurity is purposefully designed to prepare graduates to thrive in this environment. 

Key reasons to choose this program: 

• Accelerated career path: complete a full Master of Science in just one academic year of full-time study, with a part-time option for working professionals (up to three years maximum). 
• American degree in Greece: the degree is awarded by Roger Williams University (RWU, Rhode Island, USA), accredited by the New England Commission on Higher Education (NECHE) and recognized in Greece through Deree, The American University of Greece N.P.P.E. 
• Industry-connected faculty: instructors combine strong academic credentials with real-world cybersecurity experience, and senior industry executives regularly deliver guest lectures. 
• Hands-on, lab-based learning: online labs, virtualization, simulated security scenarios on Windows, Linux and macOS, and case studies based on real cybersecurity incidents. 
• Research and industry projects: through the Research, Technology & Innovation Network (RTIN), students can join industry and European research projects during their studies. 
• Career and alumni support: the Career and Alumni Office offers personalized career guidance, employer connections, Career Days, the Annual Graduate Forum, Meet the Experts events, and mentoring programs. 
• Personalized academic advising: every student is supported by the Program Coordinator acting as Academic Advisor, ensuring tailored guidance throughout the program. 

The MSc in Applied Cybersecurity is designed for ambitious individuals who want to build expertise at the intersection of technology, security, ethics and management. The program welcomes candidates with backgrounds in computer science, engineering, IT, mathematics, business and related fields who are ready to commit to a rigorous, fast-paced master’s experience. 

This program is a strong fit for students who are interested in: 

• Technical depth: developing advanced skills in cryptography, ethical hacking, penetration testing, intrusion detection, incident response and digital forensics. 
• Leadership and management: moving into senior, strategic and managerial roles, with a curriculum that emphasizes risk management, compliance and governance. 
• Innovation and emerging technologies: exploring the role of Artificial Intelligence and machine learning in cybersecurity, both as defensive tools and as new threat vectors. 
• Legal and regulatory frameworks: understanding GDPR, ENISA guidelines, ISO 27001, NIST and broader European cybersecurity law. 
• Communication and analytics: structuring technical reports, communicating risk effectively to C-level executives, and bridging the gap between technical teams and management. 
• Ethical responsibility: applying offensive and defensive techniques within strong ethical, legal and professional boundaries. 

Admission is selective and based on a holistic review of each candidate’s academic and professional profile. Applicants typically hold a recognized undergraduate degree, meet the minimum GPA requirement set by the partner institution, and submit a personal statement, recommendation letters, a CV and proof of English proficiency, in addition to participating in an interview. Deree operates a rolling admissions system, with applications accepted throughout the year up to the start of each academic term. 

The program consists of 11 mandatory courses (no electives) totaling 33 US Credits / 66 ECTS, organized into Foundation, Core, and Consolidation courses delivered sequentially to ensure progressive knowledge-building. Each course carries 3 US Credits / 6 ECTS and includes approximately 42 contact hours over a 14-week term. 

Course list: 

• CYS 6001 – Network Protocols Vulnerabilities & Cloud Infrastructures (Foundation): vulnerabilities in HTTP/HTTPS, FTP, SNMP and other network protocols, plus security best practices in cloud environments. 
• CYS 6002 – Operating Systems & Lab Environments (Foundation): OS security on Windows, Linux and macOS, and hands-on construction of virtualized lab environments. 
• CYS 6003 – Digital Forensics & Computer Analysis (Core): forensic methodologies, real-world tools, and preservation of digital evidence for legal proceedings. 
• CYS 6004 – Penetration Testing & Ethical Hacking (Core): foundational offensive techniques combined with risk, compliance and business-impact perspectives. 
• CYS 6005 – Applied Cryptography (Core): symmetric and asymmetric encryption, digital signatures, secure communication protocols, key management and cryptanalysis. 
• CYS 6006 – Cybersecurity Law & Compliance (Foundation): GDPR, CCPA, HIPAA, PCI DSS, ISO 27001, NIST and ENISA guidelines. 
• CYS 6007 – Artificial Intelligence in Cybersecurity (Core): AI and machine learning as both defensive tools and emerging threat vectors. 
• CYS 6008 – Intrusion Detection & Incident Response (Core): IDS, SOC, SIEM, and incident response methodologies and best practices. 
• CYS 6009 – Cybersecurity Risk Assessment & Policies (Foundation): risk assessment methodologies and the development of cybersecurity policies aligned with industry standards. 
• CYS 6101 – Advanced Offensive Cybersecurity Strategies (Consolidation): advanced exploitation techniques, complex environments, and the governance and ethics of advanced penetration testing (prerequisite: CYS 6004). 
• CYS 6401 – Master’s Thesis in Cybersecurity (Consolidation): an in-depth, supervised research project of approximately 15,000–20,000 words, spanning two academic terms (about 26 weeks). 

Teaching methods combine academic and professional lectures, online lab sessions, real-world case studies, group and applied assignments, open discussions, and guest lectures from senior industry executives, ensuring a balanced experience of theory, practice and professional networking. 

On graduation, students will be able to demonstrate in-depth knowledge of current and emerging cybersecurity principles and standards; make ethically and legally informed operational decisions; design and complete a substantial research project; produce structured technical reports; and use core cybersecurity tools across cryptography, ethical hacking, penetration testing, intrusion detection, incident response and digital forensics.