Cybersecurity in IoT

Cybersecurity in IoT

Overview

This content focuses on providing comprehensive training in Cybersecurity applied to IoT, covering everything from the theoretical foundations of security, privacy, and authentication to the practical application of key techniques, protocols, and standards. It also analyzes advanced defense strategies to identify, understand, and mitigate complex attacks, with the goal of protecting critical devices, networks, and infrastructure.

Goals

This course equips students with the skills to design and protect Internet of Things (IoT) architectures, identifying threats and vulnerabilities in connected devices and networks, applying appropriate security protocols and mechanisms, and assessing their impact on the protection of critical infrastructure. The micro-credential offers a highly practical perspective on IoT cybersecurity, linked to emerging career paths in Industry 4.0, connected healthcare, automotive, energy, and smart infrastructure.

Access requirements

A university degree is not required for admission. The following may enroll:

  • Students currently enrolled in or who have completed undergraduate or master's degree programs, preferably in Engineering and Architecture or Sciences. Among the undergraduate degrees offered by the University of La Laguna, those in the fields of Engineering and Architecture and Sciences are considered particularly suitable due to their strong technical foundation. The former includes, among others, the Bachelor's Degree in Computer Engineering, focused on the design of software, networks, and systems; the Bachelor's Degree in Industrial Electronics and Automation Engineering, centered on the control of embedded devices and systems; the Bachelor's Degree in Mechanical Engineering and the Bachelor's Degree in Industrial Chemical Engineering, which deal with connected and automated industrial processes; the Bachelor's Degree in Civil Engineering and the Bachelor's Degree in Technical Architecture, linked to infrastructure and smart urban environments; as well as the Bachelor's Degrees in Marine Technologies and in Nautical Studies and Maritime Transport, where sensor technology and remote monitoring are already commonplace.
  • In the sciences, the degrees in Mathematics and Physics are particularly relevant due to their strong foundation in modeling, analysis, and solving complex problems, as are the degrees in Chemistry, Biology, and Environmental Sciences, where the use of instrumentation, sensors, and connected measurement systems is increasingly widespread. All of this creates an ideal entry profile for maximizing the benefits of the IoT Cybersecurity microcredential.
  • Students and graduates from other fields who can demonstrate experience or interest in areas related to technology, data analysis, programming or digital innovation.

Admission will be based on a scoring process that considers the weighted average grade of the applicant's undergraduate or postgraduate academic record. Places will be awarded to the ten highest scores. Five percent of the places will be reserved for students with a disability rating of 33% or higher.

Academic program

Contents

The content covers the complete design and security lifecycle of an IoT system: from architecture and communication protocols to threat analysis, vulnerabilities specific to these environments, and the practical configuration of secure solutions. The approach is applied, with labs and examples that allow learners to transfer what they've learned to real-world scenarios.

Module 1 – Introduction to the Internet of Things (IoT)

Definition and evolution of the IoT. General architecture (sensing, network, and application layers). Main communication protocols (MQTT, CoAP, 6LoWPAN, etc.), connectivity, and IoT ecosystems. Technical and security challenges associated with the mass deployment of connected devices.

Module 2 – Cybersecurity Fundamentals

Principles of information security (confidentiality, integrity, availability). Types of threats and attacks. Basic cryptography (symmetric, asymmetric, hash functions, digital signatures). Secure protocols (TLS, DTLS, VPN, IPSec) and authentication and access control mechanisms.

Module 3 – Threats and vulnerabilities in IoT

Specific attack surface of the IoT ecosystem. Frequent attacks (sniffing, man-in-the-middle, DDoS, botnets like Mirai, etc.). Vulnerability analysis of IoT devices and review of real-world incident cases, with special attention to their impact on critical infrastructure.

Module 4 – Security Mechanisms in IoT

Device-level protection (hardware, firmware, and secure updates). Communications security (link, network, transport, and application). Key and certificate management. Gateway and edge computing security; trust models and distributed authentication.

Module 5 – Practical Laboratories

Setting up a simulated IoT environment (e.g., Raspberry Pi, ESP32, Jetson). Implementing lightweight encryption mechanisms on sensors and devices. Applying best practices for configuring and monitoring secure IoT environments.

MECU LEVEL: Level 6 of the Spanish Framework for Lifelong Learning Qualifications (MECU), equivalent to level 2 of the MECES (degree). This is a university-level technical qualification that allows students to independently acquire and apply basic cybersecurity knowledge and skills specific to IoT environments.

Methodology and activities

Regarding the way to organize the teaching to achieve the objectives set out in the micro-credential, the organizational modality summarized below will be followed:

  • Lectures/expository method: presentation or explanation by the teaching staff.
  • Practical classes: activities supervised by the teaching staff in the classroom, laboratories, clinics.
  • Individual work: individual preparation of assignments/projects/reports, portfolio…
  • Personal study: preparation for tests, exams, etc.
  • Assessment: written tests, oral tests, practical tests…
  • Tutoring: instruction period in which teachers and students interact with the aim of reviewing and discussing materials and topics presented in class.

The training activities to be carried out during the delivery of the micro-credential will be:

  • Theoretical classes: expository, explanatory or demonstration sessions of the contents and knowledge.
  • Practical classes: sessions of practical application of the content developed in the theoretical classes, through the resolution of exercises, problems or theoretical-practical scenarios.
  • Work: preparation of a study, essay, work… proposed in the subject, either individually or in a group following established guidelines.
  • Assessment: continuous assessment tests and final exams. Tests may be in person or online, and may be written, oral, or consist of practical exercises.

Evaluation criteria

Assessment is conceived as a continuous process, linked to student progress in both theoretical and practical content. Objective online tests (multiple-choice and other closed-response formats) will be used to rigorously and objectively verify mastery of the concepts, protocols, and security mechanisms covered in the microcredential. These tests will be complemented by practical activities and labs, so that students receive feedback on their progress and can consolidate the essential learning for designing secure IoT architectures.

General information

Credits: 2 ECTS

Duration: 27/01/2026 -10/02/2026

Teaching modality: Virtual

Location: Virtual campus of the University of La Laguna

Registration

More information

Flexibility

Short courses available in various formats (in-person, online, or hybrid). Ideal for learning without interrupting your professional life.

Employability

Content created and delivered by professionals and experts in the field, designed for immediate application.

Certification

Endorsed by the University of La Laguna. You will receive an official ECTS certificate, valid in the European Higher Education Area.

Teaching staff

Lamine Syne

Tuition

Registration link

Registration fee with or without discount

These microcredentials will be funded by the Cybersecurity Chair of the University of La Laguna C065/23, financed by the National Cybersecurity Institute (INCIBE) and funds from the Recovery, Transformation and Resilience Plan – Next Generation EU funds.

Share this microcredential