RMIT University · City Campus · Commences 1 Mar 2027

Your master's doesn't start on orientation day. It starts now.

A study-and-practice manual for the Master of Cyber Security (MC159P25) — the curriculum broken into what to learn, real labs to run, and quick quizzes to check yourself, so you arrive already fluent instead of starting from zero.

192Credit Points
2 yrsFull-Time
10Core Subjects
10Study Modules
dossier.sh
--Days
--Hours
--Mins
--Secs
01 · Curriculum Map

Thirteen knowledge areas, three clusters

RMIT groups the degree's substance into technical security, attack & defence, and management & risk — then layers specialist electives and a final capstone on top. Tap any area to open it; several include a worked example.

Technical Security

foundation
Software Security +

Building security into applications from the first line of code — how software gets attacked, and how developers close those doors before shipping.

SQL InjectionXSSCSRF Buffer OverflowBroken Access ControlOWASP Top 10
Worked example — SQL injection
User input Web app builds a query string Unescaped input alters the query Database returns data it shouldn't

If a login form builds a query by directly pasting in what the user typed, typing something like ' OR '1'='1 into the password field can make the query true for every row — which is exactly why input is validated and parameterised queries are used instead of string concatenation.

Network Security +

Protecting the pipes: how traffic moves, where it's exposed, and the layered controls that keep connected systems trustworthy.

TCP/IP · OSIFirewallsVPN IDS/IPSSegmentationTraffic Analysis
Worked example — defence in layers
Internet Firewall Router IDS/IPS Internal Network Servers / Users

Each layer assumes the one before it can fail. A firewall blocks unwanted connections; an IDS/IPS watches what got through anyway. That redundancy is the whole idea behind "defence in depth."

Cryptography +

The mathematics behind confidentiality and trust — turning readable data into something only the right key can unlock, and knowing when a hash isn't the same job as encryption.

Symmetric / AESAsymmetric / RSADigital Signatures HashingPKI / CertificatesKey Management
Encryption ≠ hashing

Encryption is reversible with the right key — HELLO → 8f3a9c... and back again. Hashing is deliberately one-way — a password goes into a hash function and only the fixed-length digest is stored, so the original is never recoverable even by the system holding it.

Digital Forensics +

Reconstructing what happened after a breach — who got in, how, what they touched, and building a defensible evidence trail.

Disk & Memory AnalysisLog AnalysisMalware Investigation Chain of CustodyEvidence Preservation
Investigation flow
Incident Collect evidence Preserve (hash + image) Analyse logs/disk/memory Reconstruct timeline Report

Attack & Defence

offensive
Ethical Hacking +

Thinking like an attacker, legally — reconnaissance through exploitation — so you know what a real adversary would try first.

Recon & ScanningEnumerationExploitation Priv. EscalationKali · Nmap · Burp
Standard methodology
Recon Scanning Enumeration Vulnerability discovery Exploitation Reporting
Penetration Testing +

Simulating an attack against a system you're authorised to test — and turning what you find into a report a business can act on.

ScopingRisk AssessmentReportingRemediation
Not just "hacking"
Planning Testing Evidence Risk assessment Reporting Remediation
Threat Analysis +

Reading the signal in the noise — connecting a suspicious login, a failed-auth burst and an odd data transfer into a real incident narrative.

Threat ActorsIOCsAttack PatternsThreat Intel
Connecting events
Unusual IP Multiple failed logins Successful login Large data transfer Possible compromise
Cryptanalysis +

The mirror image of cryptography — probing cipher and protocol weaknesses to understand exactly where "secure" quietly stops being true.

Cipher WeaknessesFrequency AnalysisKey Recovery

Management & Risk

socio-technical
Cyber Security Risk Management +

Moving from "can this be hacked?" to "how much does that matter?" — assessing likelihood, impact and the controls worth paying for.

Risk FrameworksControlsBusiness ContinuityCompliance
Basic risk model
Threat Vulnerability Likelihood Impact Risk
Human Factor Security +

People break technically-sound systems. This is the study of why — phishing, social engineering, and building a culture that resists it.

Social EngineeringPhishingInsider ThreatSecurity Culture
How it plays out
Phishing email Employee clicks Credentials stolen Attacker enters system
Governance, Risk & Compliance +

How organisations turn security into policy — the rules, standards and audits that make "secure" something you can prove, not just claim.

PolicyStandardsAuditingRegulation
Blockchain Security +

Not "crypto" trading — the security principles behind distributed systems that have to stay trustworthy with no central authority.

Distributed LedgersConsensusSmart ContractsLedger Integrity
Curriculum grouping derived from RMIT's official Master of Cyber Security (MC159P25) course page — verify subject-by-subject detail against the current program handbook before enrolling.
02 · Study & Practice Roadmap

Ten modules — learn it, do it, check it

Each module has three tabs: Learn explains the concept properly, Practice is a hands-on lab you actually run, and Quiz checks whether it stuck. Work top to bottom — your progress and quiz scores save in this browser.

Roadmap progress0 / 10 complete
03 · Glossary

Every term from the roadmap, in one place

Pulled straight from the ten modules above. Search to jump to a definition instead of hunting back through each module.

No terms match that search.
04 · Specialist Electives

Where to lean once the core is solid

RMIT offers specialist elective areas on top of the core curriculum. You don't need to pick now — but knowing the shape of each helps you steer your pre-study electives above.

01

Threat Analysis

Reading attacker behaviour and indicators of compromise before, during and after an incident. Pairs naturally with SOC / blue-team work.

02

Cryptanalysis

Attacking cryptographic systems to understand where they fail. Maths-heavy; rewards a strong footing in the core cryptography module first.

03

Governance, Risk & Compliance

The path toward senior and leadership security roles — policy, audit and regulatory fluency rather than hands-on-keyboard work.

04

Blockchain

Security of distributed, trustless systems — architecture, consensus and smart-contract risk, not just cryptocurrency mechanics.

05 · Final Capstone

Industry Project or Minor Thesis

The degree closes with one substantial piece of work. Compare both paths — you'll choose closer to the end of your candidature.

Industry Project

A practical, applied engagement with a real-world cybersecurity problem — the natural choice if you want your capstone to double as portfolio evidence for employers. RMIT's own examples include critical-infrastructure vulnerability evaluation, log-file analysis for threat hunting, and security-controls design and analysis.

Problem Research Security Assessment Implementation / Testing Analysis Final Report

Minor Thesis

A research-oriented path — better suited if you're considering a PhD afterward, or want to go deep on one open question (for example, AI-assisted threat detection or explainable security tooling) rather than deliver a bounded practical artefact.

Literature Review Methodology Research Design Implementation Evaluation Presentation
06 · Working Toolkit

Set up your bench before day one

Install and get comfortable with these before term starts — nobody teaches "how to install Kali Linux" in a master's lecture.

ENVIRONMENT

NETWORK & TRAFFIC

WEB & APPLICATION

FORENSICS & DETECTION