Cyber Security Master's Program

Why a Master's Program in Cyber Security?

The Cybersecurity Master’s Program equips students with advanced knowledge and skills necessary for the design, implementation, and management of comprehensive cybersecurity strategies. Participants learn to develop information security policies, perform risk assessments, detect cyber threats, and execute effective incident response. The curriculum is designed to foster a deep understanding of cybersecurity management frameworks and practices.

The program offers an in-depth exploration of key areas such as information security infrastructure, network protection, security software, threat intelligence, and penetration testing. Students are trained to deploy, operate, and maintain cybersecurity systems with a high degree of proficiency and adaptability.

Beyond theoretical instruction, the program emphasizes hands-on experience through cybersecurity simulations and lab-based exercises. Realistic scenarios involving threat detection, crisis management, and incident handling help students strengthen their practical capabilities. This experiential learning approach ensures graduates are fully prepared to address contemporary cybersecurity challenges in a wide range of professional settings.

About the Program

The Cybersecurity Professional Master’s Program is designed with a flexible structure, taking into account current cybersecurity threats and evolving industry needs. The program content is continuously updated to align with the changing requirements of the sector.

This program is specifically tailored for working professionals. Classes are held on weekday evenings and Saturdays, allowing participants to pursue their education without interrupting their professional commitments.

This course begins with the fundamental principles of how computers operate and continues with an in-depth introduction to the basics of computer programming. It also covers general concepts of operating systems and computer architectures, providing students with foundational knowledge in these areas.
Topics covered: Computer fundamentals; basic programming concepts; operating systems; computer architecture; foundational IT knowledge.

Instructor: Albert Levi

This course explains the fundamental concepts of cryptography. It examines classical and modern encryption systems, covering both symmetric and public-key cryptographic methods. Security mechanisms such as data integrity protection, message authentication, and digital signatures are discussed. Secure key exchange and distribution processes are explained, and authentication methods—including password-based, biometric, and multi-factor authentication—are examined. The course also explores authentication protocols, potential security attacks, and the design, development, and verification of security protocols. Additionally, applications such as access control, authorization, and the security of email and e-commerce systems are discussed.
Topics covered: Cryptographic fundamentals; symmetric and asymmetric encryption; data integrity; message authentication; digital signatures; key exchange and distribution; authentication methods; security protocols; access control and authorization; email and e-commerce security.

Instructor: Atıl Utku Ay

This course introduces network security and Internet protocols, examining TCP, UDP, IP, and selected application layer protocols. Network layer security using IPSec, transport layer security with SSL/TLS and SSH, and application layer security with HTTPS and DNS are covered. Within these contexts, network traffic analyses are conducted. Additionally, the course focuses on network attacks and defense mechanisms, firewalls, intrusion detection, network hardening techniques, honeypots, and Web Application Firewalls (WAF).
Topics covered: Network security fundamentals; TCP/IP, UDP, and IP protocols; SSL/TLS, SSH; HTTPS and DNS security; network traffic analysis; attacks and defense strategies; firewalls; intrusion detection systems; network hardening; honeypots; WAFs.

Instructor: Duygu Karaoğlan Altop

This course covers fundamental concepts related to malware, including types of malware and basic static and dynamic malware analysis techniques. Advanced static and dynamic analysis methods, reverse engineering, and preventive measures against malware are also examined.
Topics covered: Malware fundamentals; types of malware; basic and advanced static analysis; basic and advanced dynamic analysis; reverse engineering; malware prevention strategies.

Instructor: Orçun Çetin

This course covers the fundamental components of blockchain technology. Topics include core cryptographic methods for blockchains, distributed systems, and cryptocurrency applications. The course also examines smart contracts, distributed blockchain applications, and consensus algorithms. Additionally, blockchain mining, security and privacy issues, and the overall blockchain ecosystem are explored in detail.
Topics covered: Blockchain fundamentals; cryptographic methods; distributed systems; cryptocurrency applications; smart contracts; consensus algorithms; blockchain mining; security and privacy in blockchain; blockchain ecosystem.

Instructor: Kamer Kaya

This course covers the fundamental concepts of digital forensics and the legal framework related to cybercrime. It examines digital evidence collection, data recovery methods, and the software tools used in digital forensics. The course also addresses forensic applications on computer networks, radio networks, and mobile networks.
Topics covered: Digital forensics fundamentals; legal aspects of cybercrime; evidence collection; data recovery techniques; forensic software tools; network, radio, and mobile forensics; incident response procedures.

Instructor: Kamil Akdağ

This course covers advanced topics in cryptography. It includes the mathematical foundations of cryptography, elliptic curve cryptosystems, homomorphic cryptography, secret sharing protocols, oblivious transfer protocols, zero-knowledge proof protocols, secure multi-party computations, electronic voting applications, digital currency, and post-quantum cryptography.
Topics covered: Mathematical foundations; elliptic curve cryptography; homomorphic encryption; secret sharing protocols; oblivious transfer; zero-knowledge proofs; secure multi-party computation; electronic voting; digital currency; post-quantum cryptography.

Instructor: Erkay Savaş

This course explores methods for protecting the privacy of personal and sensitive data. It examines potential privacy risks that may arise during data collection, storage, processing, and sharing. Emphasis is placed on anonymization techniques and other privacy-enhancing methods, reinforced through various case studies.

Instructor: Barış Altop
LinkedIn

This course covers the principles of secure programming and common security vulnerabilities, including buffer overflows, SQL injection, cross-site scripting (XSS), session hijacking, and exposure of sensitive data. It also addresses preventive measures, advanced testing, and code analysis techniques to ensure software security.

Instructor: Orçun Çetin

This course provides a comprehensive examination of legal regulations related to cybersecurity and information technology law. It covers legal frameworks in Turkey and the European Union, including cybersecurity, personal data protection, intellectual and industrial property, electronic communications, and Internet legislation. The course also evaluates the legal regulations and compliance processes related to emerging technologies such as artificial intelligence and cloud computing. Additionally, real-world cybercrime cases and global cybersecurity law practices are analyzed to provide a comparative perspective.

Instructor: Batu Kınıkoğlu

This course focuses on cybersecurity management and risk assessment processes. It covers the development of cybersecurity plans and policies, detection of security threats, incident response procedures, and cyber intelligence. Additionally, the course addresses the management of cybersecurity incident response teams, awareness-raising, and training processes. International standards, best practices, and compliance with legal regulations related to cybersecurity management are also examined.

Instructor: Kamil Akdağ

A brief reminder for the previous course

Setting up your malware analysis machine
Basic analysis (static and dynamic)
Advanced analysis (static and dynamic)

Malware Analysis

Analyzing malware written in Java
Analyzing malware written in .NET
Malware analysis with Ghidra
Analyzing malicious documents (optional)
Fundamentals of Android malware analysis (optional)

Kernel‑Mode Malware Analysis

Kernel debugging
Kernel and user mode
Setting breakpoints
Understanding Windows symbols

Common malware encoding/obfuscation methods

Understanding and reversing XOR encoding
Identifying and decoding Base64
Understanding and reversing other encoding methods

Packing and unpacking

Unpacking packed binaries with a debugger
Unpacking uncommon/rare packers

Malware hiding techniques / code obfuscation

Understanding and analyzing code obfuscation techniques
NOP‑out instructions with IDA Pro

Instructor: Orçun Çetin

The Cybersecurity Professional Master’s Program consists of two academic terms, each lasting 14 weeks, and can be completed within one year.

Program Language: English

Program Location:

This program is specifically designed for working professionals, enabling them to attend classes without interrupting their careers.
Courses are scheduled on Tuesday and Thursday evenings from 19:00 to 22:00, and on Saturdays from 09:00 to 16:00.
All classes are held at the Altunizade Digital Campus, which stands out for its convenient and accessible location. Click here for directions.

As the first of its kind in Türkiye, Sabancı University’s Altunizade Digital Campus serves as a dynamic hub where technology, business, and academia converge. With its cutting-edge technological infrastructure, the campus fosters an ecosystem that leverages the opportunities of the digital world through education, research, and industry collaboration.

Common Outcomes of Our Graduate Programs at SU:

1. Develop the ability to use critical, analytical, and reflective thinking and reasoning

2. Reflect on social and ethical responsibilities in his/her professional life.

3. Gain experience and confidence in the dissemination of project/research outputs

4. Work responsibly and creatively as an individual or as a member or leader of a team and in multidisciplinary environments.

5. Communicate effectively by oral, written, graphical, and technological means and have competency in English.

6. Independently reach and acquire information, and develop an appreciation of the need for continuously learning and updating.

Common Outcomes of Our Graduate Programs at FENS:

7. Design and model engineering systems and processes, and solve engineering problems with an innovative approach.

8. Establish experimental setups, conduct experiment,s and/or simulations.

9. Analytically acquire and interpret data.

Cyber Security (Non-Thesis) Graduate Program Specific Outcomes:

10. Acquire foundational theoretical knowledge and technical skills in the field of cyber security.

11. Develop a deep understanding and practical insight into the fundamental approaches, exploited human and technical vulnerabilities, and methods used in existing and emerging cyber attacks, threats, and frauds.

12. Analyze an information infrastructure comprehensively, identify existing vulnerabilities, perform risk assessments, and formulate an effective cyber security strategy.

13. Implement necessary preventive measures to minimize potential costs and damages during the occurrence of cyber attacks.

14. Professionally utilize current cyber security software tools and relevant software libraries for practical applications.

15. Monitor cyber security intelligence sources, consolidate and analyze data from diverse sources, and determine and apply preventive measures to mitigate potential cyber attacks or reduce their impact.

16. Develop a profound understanding and awareness of the legal, ethical, and social dimensions of personal and organizational data security and privacy, enabling them to implement preventive measures to avoid potential risks.

Application Process

The Non-Thesis Master’s Program in Cyber Security is designed for professionals who aim to specialize in this field, enhance both theoretical and practical knowledge, and take a strong step forward in their cyber security careers.

Who Should Apply:

Graduates from quantitative fields such as engineering, computer science, mathematics, or basic sciences.
Professionals who have gained experience in cyber security within their organizations and seek advanced, in-depth training.
Anyone who wants to specialize in cyber security, stay equipped against current threats, and make a difference in the industry.

What Graduates Will Gain:

The program aims to develop highly qualified professionals who meet the needs of the cyber security sector. Graduates are expected to have the following competencies:

Acquire foundational theoretical knowledge and technical skills in the field of cyber security.
Develop deep experience and insight into existing and emerging cyber attacks, threats, and frauds, including the approaches they follow, the human and technical vulnerabilities they exploit, and the methods they use.
Conduct comprehensive analyses of information infrastructures, identify existing vulnerabilities, perform risk assessments, and establish effective cyber security strategies.
Implement necessary preventive measures to minimize potential costs and damages from cyber attacks.
Professionally utilize current cyber security software tools and relevant software libraries.
Monitor cyber security intelligence sources, consolidate and analyze data from various sources, and determine and apply preventive measures to mitigate potential attacks or reduce their impact.
Develop a thorough understanding and awareness of the legal, ethical, and social aspects of personal and organizational data security and privacy, enabling them to implement preventive measures against potential risks.

Applications for non-thesis master’s programs are evaluated by the designated Admission Jury. Eligible candidates are invited for a personal interview as part of the assessment process. Final admission decisions are made upon the evaluation conducted subsequent to the interview and are subject to the approval of the relevant Graduate School Board, based on the Jury’s recommendations.

Official notifications of the admission outcomes are communicated to the applicants accordingly. Application periods are announced in the Academic Calendar of Sabancı University

1	Online Application		Application should be completed until the deadline
2	Program Application Form		CYSEC Program Application Form should be uploaded under "Documents" in the online application system
3	Official Transcript		An official document issued by the registrar of the candidate's previous Institution showing all courses and grades taken. It should be uploaded under "Documents" in the online application system.
4	Statement of Purpose		Document (one or two pages) explaining your objectives and your motivation for pursuing a graduate degree in the field of DA. It should be uploaded under "Documents" in the online application system.
5	Curriculum Vitae (CV)		Candidates must submit an up-to-date Curriculum Vitae (resume). It should be uploaded under "Documents" in the online application system.
6	Photograph		One recently taken photograph must be uploaded to the online application system.
7	Two Letters of Recomendation		The writers of recommendation letters are expected to upload them to the online system. When the application is completed, a link will be emailed to the email addresses indicated in the “Recommenders” section of the online application system for them to upload their recommendation letters.
8	Degree Requirements		An undergraduate degree is required in order to apply for a graduate program. There is no requirement about the undergraduate program type for application. The applicant should have an undergraduate or a graduate diploma in order to be admitted to a graduate program. Applicants must have completed their previous degree programs by the enrollment date for the Fall Term at Sabancı University.
9	English Proficiency Exam Result	TOEFL	Internet-based test (IBT): Min. score 78 (Best score is not accepted)
		PTE	Min. score 48
		CAE	Min. score B
		CPE	Min. score C
		YDS	Min. score 65
		e-YDS
		YÖKDİL
		e-YÖKDİL
		ELAE*	Candidates must obtain a satisfactory score in the Sabancı University English Language Assessment Examination (SU-ELAE). *ELAE exam is composed of 3 parts: Grammar, Vocabulary and Writing. The grammar and vocabulary sections make up 50% and the writing section makes up the remaining 50% of the overall grade. The exam is free. When your application has been accepted by the institute, you are automatically registered for this exam. You will be informed of the date, time and location of the exam and its result at a later date by the institute.

English Proficiency Exam Result

As the instruction language at Sabancı University is English, any of the above English Proficiency Exam results with a score equal to or above the minimum will be sufficient for application. Scanned copies are acceptable for the application period, but the originals should be submitted during the admission process.

Test dates must be within:

2 years for TOEFL, PTE
3 years for CAE, CPE
5 years for e-YDS, YDS, YÖKDİL and e-YÖKDİL

of the candidate's official application date to the degree program.

According to the updated YOK (Turkish Higher Education Council) Legislation;

Equivalency of IELTS and TOEFL-PBT exams is not accepted by YOK (Turkish Higher Education Council) any more; and these exams will not be valid for Graduate Program registrations.

If the international exams, of which equivalency is accepted by YOK and which are accepted for Graduate Program registrations by Sabancı University, are taken in Turkey; these exams have to be taken in a State University building.

Applicants who do not submit a valid English Proficiency Exam score (fulfilling all other requirements) can only be admitted to a graduate study on the condition of obtaining a satisfactory score from the Sabancı University English Language Assessment Exam (ELAE)

Graduates of Sabanci University are exempt from submitting an English Proficiency Exam score provided that they apply within two years following their graduation. Period between graduation date from the previous program and registration date to the new program should be maximum 2 years.

IMPORTANT NOTE:

ALES (Graduate Admission Test for Turkish Universities), GRE or GMAT Score is not required for Non-thesis Master’s Degree programs.

Your registration will be completed upon the approval of Turkish Higher Education Council regarding the equivalence of the last graduated higher instution and the course of study.

Application:

Applications should be submitted via online application system only. Applications sent via e-mail cannot be evaluated. We would like to remind you that if you get admitted, originals of all official documents required to be submitted during university registrations.

Address: Sabancı Üniversitesi, Öğrenci Kaynakları Birimi, Orta Mahalle, Üniversite Cd. No:27, Tuzla / 34956 İstanbul

Phone: +90 (216) 483 90 93

Fax: +90 (216) 483 90 73

E-mail: studentinfo@sabanciuniv.edu

Applications are accepted only for the Fall semester of each academic year. No applications are accepted for the Spring and Summer semesters.

Application dates for the 2026–2027 Academic Year:

Application Deadline: To be announced later
Interviews: To be announced later
English Language Assessment Exam (ELAE): To be announced later

For the tuition fee of the 2026-2027 academic year, please contact sec@sabanciuniv.edu

Discounts
Please contact us to get information about discount opportunities: sec@sabanciuniv.edu

Payment Conditions
In cooperation with Akbank, Sabanci University provides a tuition fee installment plan to facilitate the payments. This installment is only valid for tuition fee payments by the applicants themselves but does not cover the students whose tuition fees are paid by their companies

Scholarships
There are no scholarships available for prospective students of the graduate program in Information Technology.

EVENT	DATE	TIME	LOCATION	REGISTER
Our information sessions for the 2025–2026 academic year have ended. Click here for more information.				Click here

Student Profile

Average Age

Gender Distribution (F/M)

%27 - %73

Alumni

Ege İnan – Class of 2024

Mustafa Murat Sungar – Class of 2023

Contact

E-mail: sec@sabanciuniv.edu
Phone: +90 216 483 99 82

Why a Master's Program in Cyber Security?

About the Program

SEC 500 Fundamentals of Information Technology

SEC 501 Introduction to Cryptography and Security Protocols

SEC 502 Network Security

SEC 503 Malware Analysis and Detection

SEC 505 Blockchain: Security and Applications

SEC 504 Incident Response and Digital Forensics

SEC 506 Advanced Cryptography

SEC 508 Privacy-Preserving Data Management

SEC 509 Secure Coding and Software Security

SEC 510 Cyber Security Law

SEC 511 Cybersecurity Planning and Management

SEC 512 Advanced Malware and Code Analysis