Overview
Cybersecurity at Durham trains defenders and ethical hackers in a controlled campus lab environment. You will configure firewalls, analyse malware samples, and conduct penetration tests under faculty supervision. Modules span cryptography, secure software development, digital forensics, and security governance. Capture-the-flag competitions and industry certifications (CompTIA Security+) are integrated into the curriculum.
BSc (Hons) Cybersecurity is taught as one award, not a list of unrelated modules. The published length is 3 years full-time, and the credit total is 360. Students move from Computing & Networking Foundations through Computing & Networking Foundations; Programming for Cybersecurity (Python & C); Information Security Fundamentals; Discrete Mathematics & Logic for Cyber; Linux Administration & Shell Scripting; Web Technologies & Application Security, and finish on Honours Cybersecurity Project & Dissertation.
Each course has a question, a method, and a submission. In this field, students map one named system, write a threat model, and specify the controls that would stop the most likely path. Reading is control catalogues, incident write-ups, and a short technical standard. The artefact a marker expects is a defensive design with a test plan and a statement of residual risk.
The award is built so that a graduate can do the following in practice: Harden systems and networks against common attack vectors Conduct authorised penetration tests with documented findings Analyse security incidents using forensic procedures
Teaching assumes the student can read a source, attempt a problem before the seminar, and revise after feedback. Attendance at live seminars is part of the design. The capstone or final course must use the methods of the earlier courses; a project that ignores them does not pass.
The pages for each course name the topics that are examined. Those topics are the syllabus. A brochure line is not a substitute for them.
The Cyber Range lab simulates enterprise networks for red-team/blue-team exercises each semester.
Who This Programme Is For
- ✦Computing students passionate about security
- ✦IT professionals seeking formal security credentials
- ✦Students aiming for MSc Cybersecurity or CISSP pathways
Faculty spotlight
Dr. Fiona McAllister leads Network Security; Professor James Okello supervises malware analysis research.
Programme Structure & Delivery
Coursework
Interactive modules, weekly readings, recorded and live seminars, and collaborative discussions with peers worldwide.
Assessment
Module assignments, proctored examinations, and capstone projects designed to demonstrate mastery of the field.
Learning Outcomes
- ✦Harden systems and networks against common attack vectors
- ✦Conduct authorised penetration tests with documented findings
- ✦Analyse security incidents using forensic procedures
- ✦Advise organisations on risk management and compliance
Career Pathways
- ✦Security Analyst
- ✦Penetration Tester
- ✦SOC Analyst
- ✦IT Auditor
- ✦Further Study (MSc Cybersecurity)
Assessment
Modules are assessed through a published mix of coursework, applied projects, and examinations. Exam windows are announced in advance so students in other time zones are not forced into overnight sittings. Alternative arrangements are available where documented.
Curriculum
Year 1 — Fundamentals
CYB101Computing & Networking Foundations- CYB101-M1 · Assets, trust boundaries, and the adversary model — Computing & Networking Foundations
- CYB101-M2 · Threat modelling and attack paths — Computing & Networking Foundations
- CYB101-M3 · Identity, logging, and segmentation — Computing & Networking Foundations
- CYB101-M4 · Detection, containment, and evidence — Computing & Networking Foundations
- CYB101-M5 · Residual risk and what a control does not stop — Computing & Networking Foundations
- CYB101-M6 · Defensive design, test plan, and after-action review — Computing & Networking Foundations
20 creditsCYB102Programming for Cybersecurity (Python & C)- CYB102-M1 · Assets, trust boundaries, and the adversary model — Programming for Cybersecurity (Python & C)
- CYB102-M2 · Threat modelling and attack paths — Programming for Cybersecurity (Python & C)
- CYB102-M3 · Identity, logging, and segmentation — Programming for Cybersecurity (Python & C)
- CYB102-M4 · Detection, containment, and evidence — Programming for Cybersecurity (Python & C)
- CYB102-M5 · Residual risk and what a control does not stop — Programming for Cybersecurity (Python & C)
- CYB102-M6 · Defensive design, test plan, and after-action review — Programming for Cybersecurity (Python & C)
20 creditsCYB103Information Security Fundamentals- CYB103-M1 · Assets, trust boundaries, and the adversary model — Information Security Fundamentals
- CYB103-M2 · Threat modelling and attack paths — Information Security Fundamentals
- CYB103-M3 · Identity, logging, and segmentation — Information Security Fundamentals
- CYB103-M4 · Detection, containment, and evidence — Information Security Fundamentals
- CYB103-M5 · Residual risk and what a control does not stop — Information Security Fundamentals
- CYB103-M6 · Defensive design, test plan, and after-action review — Information Security Fundamentals
20 creditsCYB104Discrete Mathematics & Logic for Cyber- CYB104-M1 · Assets, trust boundaries, and the adversary model — Discrete Mathematics & Logic for Cyber
- CYB104-M2 · Threat modelling and attack paths — Discrete Mathematics & Logic for Cyber
- CYB104-M3 · Identity, logging, and segmentation — Discrete Mathematics & Logic for Cyber
- CYB104-M4 · Detection, containment, and evidence — Discrete Mathematics & Logic for Cyber
- CYB104-M5 · Residual risk and what a control does not stop — Discrete Mathematics & Logic for Cyber
- CYB104-M6 · Defensive design, test plan, and after-action review — Discrete Mathematics & Logic for Cyber
20 creditsCYB105Linux Administration & Shell Scripting- CYB105-M1 · Assets, trust boundaries, and the adversary model — Linux Administration & Shell Scripting
- CYB105-M2 · Threat modelling and attack paths — Linux Administration & Shell Scripting
- CYB105-M3 · Identity, logging, and segmentation — Linux Administration & Shell Scripting
- CYB105-M4 · Detection, containment, and evidence — Linux Administration & Shell Scripting
- CYB105-M5 · Residual risk and what a control does not stop — Linux Administration & Shell Scripting
- CYB105-M6 · Defensive design, test plan, and after-action review — Linux Administration & Shell Scripting
20 creditsCYB106Web Technologies & Application Security- CYB106-M1 · Assets, trust boundaries, and the adversary model — Web Technologies & Application Security
- CYB106-M2 · Threat modelling and attack paths — Web Technologies & Application Security
- CYB106-M3 · Identity, logging, and segmentation — Web Technologies & Application Security
- CYB106-M4 · Detection, containment, and evidence — Web Technologies & Application Security
- CYB106-M5 · Residual risk and what a control does not stop — Web Technologies & Application Security
- CYB106-M6 · Defensive design, test plan, and after-action review — Web Technologies & Application Security
20 creditsYear 2 — Offensive & Defensive Security
CYB201Applied Cryptography & PKI- CYB201-M1 · Assets, trust boundaries, and the adversary model — Applied Cryptography & PKI
- CYB201-M2 · Threat modelling and attack paths — Applied Cryptography & PKI
- CYB201-M3 · Identity, logging, and segmentation — Applied Cryptography & PKI
- CYB201-M4 · Detection, containment, and evidence — Applied Cryptography & PKI
- CYB201-M5 · Residual risk and what a control does not stop — Applied Cryptography & PKI
- CYB201-M6 · Defensive design, test plan, and after-action review — Applied Cryptography & PKI
20 creditsCYB202Network Defence & Firewall Engineering- CYB202-M1 · Assets, trust boundaries, and the adversary model — Network Defence & Firewall Engineering
- CYB202-M2 · Threat modelling and attack paths — Network Defence & Firewall Engineering
- CYB202-M3 · Identity, logging, and segmentation — Network Defence & Firewall Engineering
- CYB202-M4 · Detection, containment, and evidence — Network Defence & Firewall Engineering
- CYB202-M5 · Residual risk and what a control does not stop — Network Defence & Firewall Engineering
- CYB202-M6 · Defensive design, test plan, and after-action review — Network Defence & Firewall Engineering
20 creditsCYB203Ethical Hacking & Penetration Testing- CYB203-M1 · Assets, trust boundaries, and the adversary model — Ethical Hacking & Penetration Testing
- CYB203-M2 · Threat modelling and attack paths — Ethical Hacking & Penetration Testing
- CYB203-M3 · Identity, logging, and segmentation — Ethical Hacking & Penetration Testing
- CYB203-M4 · Detection, containment, and evidence — Ethical Hacking & Penetration Testing
- CYB203-M5 · Residual risk and what a control does not stop — Ethical Hacking & Penetration Testing
- CYB203-M6 · Defensive design, test plan, and after-action review — Ethical Hacking & Penetration Testing
20 creditsCYB204Digital Forensics & Incident Response- CYB204-M1 · Assets, trust boundaries, and the adversary model — Digital Forensics & Incident Response
- CYB204-M2 · Threat modelling and attack paths — Digital Forensics & Incident Response
- CYB204-M3 · Identity, logging, and segmentation — Digital Forensics & Incident Response
- CYB204-M4 · Detection, containment, and evidence — Digital Forensics & Incident Response
- CYB204-M5 · Residual risk and what a control does not stop — Digital Forensics & Incident Response
- CYB204-M6 · Defensive design, test plan, and after-action review — Digital Forensics & Incident Response
20 creditsCYB205Secure Software Development & DevSecOps- CYB205-M1 · Assets, trust boundaries, and the adversary model — Secure Software Development & DevSecOps
- CYB205-M2 · Threat modelling and attack paths — Secure Software Development & DevSecOps
- CYB205-M3 · Identity, logging, and segmentation — Secure Software Development & DevSecOps
- CYB205-M4 · Detection, containment, and evidence — Secure Software Development & DevSecOps
- CYB205-M5 · Residual risk and what a control does not stop — Secure Software Development & DevSecOps
- CYB205-M6 · Defensive design, test plan, and after-action review — Secure Software Development & DevSecOps
20 creditsCYB206Identity, Access Management & Directory Services- CYB206-M1 · Assets, trust boundaries, and the adversary model — Identity, Access Management & Directory Services
- CYB206-M2 · Threat modelling and attack paths — Identity, Access Management & Directory Services
- CYB206-M3 · Identity, logging, and segmentation — Identity, Access Management & Directory Services
- CYB206-M4 · Detection, containment, and evidence — Identity, Access Management & Directory Services
- CYB206-M5 · Residual risk and what a control does not stop — Identity, Access Management & Directory Services
- CYB206-M6 · Defensive design, test plan, and after-action review — Identity, Access Management & Directory Services
20 creditsYear 3 — Advanced Security & Honours
CYB301Security Operations & Threat Intelligence- CYB301-M1 · Assets, trust boundaries, and the adversary model — Security Operations & Threat Intelligence
- CYB301-M2 · Threat modelling and attack paths — Security Operations & Threat Intelligence
- CYB301-M3 · Identity, logging, and segmentation — Security Operations & Threat Intelligence
- CYB301-M4 · Detection, containment, and evidence — Security Operations & Threat Intelligence
- CYB301-M5 · Residual risk and what a control does not stop — Security Operations & Threat Intelligence
- CYB301-M6 · Defensive design, test plan, and after-action review — Security Operations & Threat Intelligence
20 creditsCYB302Cloud Security Architecture & Virtualisation- CYB302-M1 · Assets, trust boundaries, and the adversary model — Cloud Security Architecture & Virtualisation
- CYB302-M2 · Threat modelling and attack paths — Cloud Security Architecture & Virtualisation
- CYB302-M3 · Identity, logging, and segmentation — Cloud Security Architecture & Virtualisation
- CYB302-M4 · Detection, containment, and evidence — Cloud Security Architecture & Virtualisation
- CYB302-M5 · Residual risk and what a control does not stop — Cloud Security Architecture & Virtualisation
- CYB302-M6 · Defensive design, test plan, and after-action review — Cloud Security Architecture & Virtualisation
20 creditsCYB303Governance, Risk, Compliance & ISO 27001- CYB303-M1 · Assets, trust boundaries, and the adversary model — Governance, Risk, Compliance & ISO 27001
- CYB303-M2 · Threat modelling and attack paths — Governance, Risk, Compliance & ISO 27001
- CYB303-M3 · Identity, logging, and segmentation — Governance, Risk, Compliance & ISO 27001
- CYB303-M4 · Detection, containment, and evidence — Governance, Risk, Compliance & ISO 27001
- CYB303-M5 · Residual risk and what a control does not stop — Governance, Risk, Compliance & ISO 27001
- CYB303-M6 · Defensive design, test plan, and after-action review — Governance, Risk, Compliance & ISO 27001
20 creditsCYB304Malware Analysis & Reverse Engineering- CYB304-M1 · Assets, trust boundaries, and the adversary model — Malware Analysis & Reverse Engineering
- CYB304-M2 · Threat modelling and attack paths — Malware Analysis & Reverse Engineering
- CYB304-M3 · Identity, logging, and segmentation — Malware Analysis & Reverse Engineering
- CYB304-M4 · Detection, containment, and evidence — Malware Analysis & Reverse Engineering
- CYB304-M5 · Residual risk and what a control does not stop — Malware Analysis & Reverse Engineering
- CYB304-M6 · Defensive design, test plan, and after-action review — Malware Analysis & Reverse Engineering
20 creditsCYB305Honours Cybersecurity Project & Dissertation- CYB305-M1 · Assets, trust boundaries, and the adversary model — Honours Cybersecurity Project & Dissertation
- CYB305-M2 · Threat modelling and attack paths — Honours Cybersecurity Project & Dissertation
- CYB305-M3 · Identity, logging, and segmentation — Honours Cybersecurity Project & Dissertation
- CYB305-M4 · Detection, containment, and evidence — Honours Cybersecurity Project & Dissertation
- CYB305-M5 · Residual risk and what a control does not stop — Honours Cybersecurity Project & Dissertation
- CYB305-M6 · Defensive design, test plan, and after-action review — Honours Cybersecurity Project & Dissertation
40 creditsAdmission requirements
Academic entry
- A-levels BBB (or equivalent) in relevant subjects, or an Access to HE Diploma with Merit profile
- International Baccalaureate 28 points, or high school diploma with GPA 3.0/4.0 minimum
English language
- English proficiency: IELTS 5.5, TOEFL 46, or equivalent (waived for prior English-medium study)
Documents
- Personal statement (400–600 words) explaining your academic interests and career goals
- One academic reference from a teacher, tutor, or school counsellor
Research & interview
- Optional: portfolio or interview for creative and professional programmes
Programme questions
How long is the BSc (Hons) Cybersecurity?+
The published duration is 3 years full-time. Teaching language: English. Actual time-to-complete depends on mode and any recognised prior learning.
Can I study this from my country?+
This is a fully online award. You study from your country. No student visa and no campus relocation are required.
What does it cost?+
Degree tuition for this award is published as £0 / tuition-free on the online pathway. Examination or administrative fees may apply at checkout — never an annual tuition invoice. Check the Fees page for any extras.
What are the entry requirements?+
Requirements are grouped on this page (academic, English, documents). Equivalent qualifications are considered. English may be waived after prior English-medium study.
How is the programme assessed?+
Assessment is typically a mix of coursework, projects, and examinations. Doctoral awards include a thesis or dissertation and an oral examination. Details sit in the programme specification and module outlines.
Will this award be recognised where I live?+
Recognition of the award for local employment, professional licence, or ministry attestation is decided by your employer or regulator. Durham University publishes verification pages for certificates. We do not claim automatic equivalence in every country.
How do I apply?+
Start an application on this website. Progress is saved from the first step. Admissions: admissions@durhm.co.uk.