Cybersecurity and Artificial Intelligence

-----------------------------
Fully online programme
Cybersecurity and Artificial Intelligence
Course sheet
A.Y. 2026/2027
Bachelor
L-31 R - Scienze e tecnologie informatiche
Bachelor
180
ECTS
Access
Open
3
Years
Course location
Milan
Language
Italian
The degree program aims to provide future graduates in Cybersecurity and Artificial Intelligence with a broad, solid, and in-depth cultural, technological, and methodological preparation in the field of computer science, with particular attention to issues of security and privacy, as well as artificial intelligence. Its purpose is to equip students to address all challenges related to the development of secure services/software at both the infrastructural and application levels.
The program?s objective is to offer a strong cultural, mathematical, and methodological foundation in order to:
i) understand and master the foundational aspects of computer systems;
ii) become familiar with the basics of the scientific method;
iii) analyze problems and independently?or in teams?develop models and IT solutions;
iv) acquire appropriate technological skills to support various applications;
v) understand and assess the ethical impact of continuous scientific and technological progress within the discipline;
vi) develop communication skills related to the designed solutions and the problems addressed, tailored to both specialist and non-specialist audiences.
The degree program also aims to provide specific skills in the fields of security and privacy, as well as artificial intelligence.
In particular, it aims to:
i) provide the expertise needed to understand the evolution of security and privacy threats, including through advanced scientific and regulatory documentation, in order to apply specific protection tools and countermeasures?especially in modern web/cloud system networks;
ii) provide the skills required to understand and design solutions based on artificial intelligence, including generative AI;
iii) develop competencies for building secure software and infrastructural solutions, also leveraging AI;
iiii) develop skills related to corporate cybersecurity management and organization.
During the first year, the curriculum includes fundamental computer science skills, covering programming, computer architectures, networks and cloud systems, as well as basic mathematics. Students will also acquire competencies related to learning systems and methods for data analysis and visualization.
The second year focuses on acquiring more specialized skills in AI, generative AI, and network and software/service security, complemented by computer science courses related to databases, as well as legal and ethical competencies.
The third year is dedicated to complementary skills in security and AI.
The teaching model is built on an advanced online learning platform, which includes digital resources, asynchronous activities, interactive forums, guided e-tivities, practical exercises, and collaborative tools. Continuous tutoring, the possibility of building personalized pathways, and the presence of an active learning community make the program inclusive and capable of supporting students with diverse needs, while also enhancing independent learning.
The program ensures the development of transversal (soft) skills, such as teamwork, the ability to critically analyze complex scenarios, and the informed use of digital technologies, thus facilitating entry into dynamic work environments and access to master?s programs aligned with the acquired education.
All learning takes place fully online through an integrated set of activities designed to ensure complete educational equivalence to in-person teaching, in accordance with the University?s pedagogical model.
Expert in System, Data, and Network Security
Role in a work context:
The professions in this category operate in the broad field of business consulting, supporting companies in the analysis and resolution of cybersecurity issues related to management information systems, data processing, intranet and Internet communications, and the development of interactive applications.
Competences associated with the role:
These professionals possess specific expertise in technologies and methods for cybersecurity and can understand the organizational and operational dynamics of the production environments in which they work. They are able to contribute to structured projects and heterogeneous business contexts, offering specialized knowledge typically not present within companies. They work both on solving cybersecurity issues affecting corporate information systems and on supporting technological innovation and the selection of cybersecurity technologies.
Career opportunities:
They carry out highly specialized professional activities in business consulting for companies, public bodies, and professional firms that often lack adequate cybersecurity expertise needed for the proper and effective management of information systems. This includes compliance with regulations on data processing, protection of corporate assets from breaches and system compromises, and maintaining the operability of systems, networks, and applications in the event of cyber intrusions or accidental malfunctions.

Expert in Artificial Intelligence and Its Security Applications
Role in a work context:
The professions in this category focus on the analysis and development of artificial intelligence?based solutions applied to the security of information systems, networks, and data. They support companies and public organizations in identifying and preventing cyber threats, detecting anomalies, and protecting critical infrastructures, contributing to the improvement of security processes and the adoption of innovative technologies.
Competences associated with the role:
These professionals have expertise in applying AI methods and techniques to cybersecurity. They can integrate machine learning, deep learning, and generative AI tools with traditional defense systems. They work on complex projects where AI is used to strengthen the protection of data and systems, making threat prevention and management more effective and supporting technological innovation within organizations.
Career opportunities:
They work in specialized roles within consulting and applied research. They find employment in IT and cybersecurity service companies, public and private institutions, organizations developing digital solutions and technological platforms, and in sensitive sectors such as finance, healthcare, and critical infrastructure?where data protection and system resilience are essential.

Technicians Specialized in the Analysis and Development of Business Software Using Cybersecurity Methodologies
Role in a work context:
The professions in this category fall within the profiles of Software Analysts and Designers, with specific expertise in secure development and programming, testing and analytical methodologies aimed at identifying security vulnerabilities, and systems for correcting and preventing security issues in software. They are also experts in cryptographic techniques (algorithms and protocols) for protecting data stored in corporate databases.
Competences associated with the role:
These professionals integrate traditional software development and programming skills with specific knowledge of common software security issues. In the software development lifecycle, they can apply the main software security methodologies from the design phase through development and testing. They also verify vulnerabilities in third-party products or business applications and, where necessary, define the most appropriate countermeasures for efficient and secure use.
Career opportunities:
Secure software development and the assessment of third-party software security are now essential requirements for most companies, public administrations, and service providers. Professionals with this profile can work in any organization equipped with an information system or involved in the development of software for third parties.

Technicians Specialized in Cybersecurity Methodologies for Web/Cloud Applications and Services, Including AI-Based Technologies
Role in a work context:
The professions in this category are part of the profiles of Web Application and Cloud Service Analysts and Designers, for whom specific competencies in securing highly interactive, network-based applications are now essential. Equally important is understanding the potential and risks associated with using artificial intelligence, including generative AI, in systems and in cybersecurity in general. These professionals combine web application development and AI model development with knowledge of cloud security issues, protecting corporate networks and individual users from malicious code, unauthorized access, and cybercrime?today?s main vectors of attack.
Competences associated with the role:
These professionals know the main methodologies used for building traditional and generative AI models, as well as web and cloud applications. They support secure design, assess security levels through testing and monitoring tools (including AI-based systems), and apply cryptographic techniques for secure network communication and data protection in web/cloud applications. They are strongly oriented toward technological innovation due to the rapid evolution of web/cloud and AI technologies.
Career opportunities:
The increasing spread of AI-based web and cloud services makes these professionals highly valuable in the industrial, commercial, and service sectors. Security in these contexts is becoming a top priority due to the rise of online fraud and cyberattacks and their potential commercial and financial impact. These professionals are therefore essential for all organizations?public or private, of any size or sector?that have adopted web services, including AI-enhanced solutions, for commercial presence or service delivery.

Technicians Specialized in Information and Communication Technologies
Role in a work context:
The professions in this category belong to the profiles of experts in the application of information and communication technologies across various operational contexts?the foundational domain of the L-31 Computer Science degree program. These professionals combine software development skills with knowledge of operational challenges in different application contexts (industrial automation, information systems, digital communication, decision support, etc.), working on the design, management, and maintenance of even complex IT applications.
Competences associated with the role:
These professionals have solid foundational knowledge and a broad set of competences across computer science and telecommunications. They are familiar with the scientific method, possess strong modelling skills, and can understand and use the mathematical tools supporting computer science. They are able to work in teams, operate independently, select appropriate technologies, and quickly integrate into work environments.
Career opportunities:
Graduates can work in a wide range of application domains for the design and management of IT and cloud systems, as well as for the development of new systems and applications/services.
The educational experience within the degree programme may be enriched by including study periods at universities abroad, both to deepen specific disciplinary topics and to gain valuable personal and social experience in stimulating, dynamic, and international technological environments. Students have the opportunity to undertake study periods abroad, attending courses to be included in their individual study plan, through Erasmus+ agreements with more than 50 universities in Belgium, Finland, France, Germany, Greece, Lithuania, Norway, the Netherlands, Poland, Portugal, the Czech Republic, Romania, Slovenia, Spain, Switzerland, Türkiye, and Hungary. These study periods typically last five months and include academic activities amounting to approximately 30 ECTS credits. The subjects offered during these periods generally fall within the area of information and communication technologies and their applications.
Recognition of the activities completed abroad is based on the prior Learning Agreement, defined by the student together with the Erasmus Departmental Coordinator before the start of the mobility period, and on the successful completion of the approved activities. Courses successfully completed abroad replace the corresponding educational activities listed in the official study plan, either covering the same subject areas or complementing the foundational competences already acquired. The recognition of ECTS credits earned abroad and the integration of these activities into the student's study plan are carried out by the designated evaluation committee of the Computer Science Teaching Board.
Similarly, students may undertake internship periods at partner universities abroad as part of their thesis work. Recognition follows the same rules as those applicable to coursework.
Erasmus Programme: the coordinator for these initiatives within the Department of Computer Science is Prof. Fabio Scotti.
International Programmes: the coordinator for these initiatives within the Department of Computer Science is Prof. Davide Rocchesso.
Further academic information regarding international mobility opportunities for students enrolled in programmes offered by the Department of Computer Science is available at:
https://di.unimi.it/it/rapporti-internazionali/mobilita-internazionale/opportunita-internazionali
Attendance of synchronous lectures is strongly recommended
Enrolment
Admission Requirements and Prior Knowledge
To be admitted to the Bachelor's Degree Programme in Cybersecurity and Artificial Intelligence, applicants must hold an upper secondary school diploma or another equivalent qualification obtained abroad and recognized as valid. In addition, an adequate initial preparation is required; in particular, applicants must possess basic knowledge of scientific subjects and elementary logical reasoning skills.

Procedures for Verifying Knowledge and Personal Preparation
Admission to the Bachelor's Degree Programme in Cybersecurity and Artificial Intelligence includes a mandatory assessment of initial knowledge, aimed at verifying whether the student has the foundational preparation necessary to successfully undertake the study programme. Specifically, the test assesses basic competencies in scientific disciplines and elementary logic.
The assessment is conducted through the University's digital platform, enabled for online delivery and aligned with the remote‑learning model of the degree programme. The test is administered by a Committee appointed by the Academic Board, and the results are communicated directly to the participating students. Participation in the test is mandatory for all newly enrolled students.

Additional Learning Requirements (OFA) and Remediation Procedures
If the assessment is not passed, the student is assigned specific Additional Learning Requirements (OFA), which must be fulfilled within twelve months from the individual enrolment date. These are completed through online courses in mathematical subjects, with a total duration of 20 hours, in line with the programme's year‑round enrolment model.
Students who are assigned OFA must take an additional in‑person test to fulfill them. This test is held exclusively during the examination sessions of the Mathematics and Fundamentals of Programming course cluster.
Failure to fulfill the OFA prevents the student from taking second‑year examinations.
The OFA monitoring system is fully integrated into quality assurance processes and allows for the evaluation of the effectiveness of remediation pathways, supporting continuous improvement. OFA management is carried out in accordance with the principles of fairness and accessibility, making full use of the educational potential of online learning.

Admission

Application for admission: application deadlines will be published shortly.

Online services
Programme description and courses list
Compulsory
Courses or activities Max ECTS Total hours Language Lesson period SSD
Computer Architectures and Networks 18 120 Italian Second four month period INFO-01/A
English Assessment B1 (3 ECTS) 3 0 English Open sessions NN
Foundations of Ai 24 160 Italian Third four month period INFO-01/A
Mathematics and Foundations of Programming 21 140.01 Italian First four month period INFO-01/A MATH-03/A MATH-05/A
be activated by the A.Y. 2027/2028
Compulsory
Courses or activities Max ECTS Total hours Language Lesson period SSD
Advanced Topics in Ai and Cybersecurity 21 140 Italian Second four month period IINF-05/A INFO-01/A
Foundations of Data Management and Cybersecurity 24 160 Italian First four month period GIUR-14/A GIUR-17/A INFO-01/A
Intelligent Security 18 120 Italian Third four month period INFO-01/A
be activated by the A.Y. 2028/2029
Compulsory
Courses or activities Max ECTS Total hours Language Lesson period SSD
Advanced Security Topics 18 120 Italian First four month period IINF-05/A INFO-01/A
Compulsory
Courses or activities Max ECTS Total hours Language Lesson period SSD
Internship 18 0 Italian Open sessions NN
Final Thesis 3 0 Italian Open sessions NN
Optional activities and study plan rules
1 - Elective courses
The student is required to earn 12 ECTS credits of free‑choice courses selected either from those offered by the Degree Programme Board or from any courses offered by the University, provided that their contents do not overlap with those of the courses delivered by the Bachelor's Degree Programme in Computer Security and Artificial Intelligence or by other degree programmes overseen by the Department of Computer Science, and that they are consistent with the student's study plan.
Students may request recognition of ECTS credits for training activities completed at external institutions, by submitting the corresponding certification. Each certification may grant a maximum of 3 ECTS credits, and up to 2 certifications may be recognized. Students wishing to apply for recognition must complete the "istanza" form available at:
https://www.unimi.it/it/studiare/servizi-gli-studenti/segreterie-infostudenti/modulistica-generale
and submit it to the Student Office of their degree programme together with copies of the obtained certifications.
Evaluation will be carried out by a designated committee on the basis of the following criteria:

Validity: the certification must have been obtained within the last 5 years.
Specificity: the certification must relate to skills consistent with those required by the degree programme in which the student is enrolled.
Specialization: the certification must concern specialized and/or professional competences.
Level: the certification must attest competences at an intermediate or advanced level. Basic or entry‑level certifications are not eligible for recognition.
Learn more
Milan
Course locations
Exams are usually held at the Teaching Sector in via Celoria 18, Milan

Tuition fees are to be paid in two instalments:

  • the first instalment amounts to 646 euros and is due upon enrolment
  • the amount of the second instalment varies according to each student's ISEE University value, from 0 to a maximum of 4,561.12 euros. Payment is due within 120 days of enrolment.

Certain categories of students are entitled to a partial or full tuition waiver, as established by Italian legislation or the University's own regulations.