Artificial Intelligence & Emerging Tech Security, Industrial Control Systems / OT Security

CA306: Security of Emerging Intelligent Systems

Course authored by:

Perparim Mjeku, Rinor Shehu, Altin Gashi

27 Hours of Instruction

Includes lectures, guest speakers, and Q&A sessions

Hands-on
labs

6 Labs

Live Online or On-Demand Access

Join weekly synchronous sessions or access all material and recorded lectures anytime

Intermediate Level

Developing practical skills and deepening understanding of core concepts

Course Materials

Available after purchase

Course Overview

Securing intelligent systems is not about protecting software it is about defending interconnected environments where digital compromise leads to physical impact. Practical capability in securing AI-driven, autonomous, and cyber-physical systems is developed throughout five sections. You will explore how these systems operate across sensing, control, and decision-making layers, and how vulnerabilities propagate across them. The course examines adversarial machine learning, autonomous system risks, and large-scale infrastructure security. Structured approaches to threat modeling, trust management, and resilience engineering are applied to real-world scenarios. Emphasis is placed on securing both system logic and physical outcomes in dynamic environments. Expect complex scenarios, analytical depth, and high standards by the end, you will be able to assess and secure next-generation intelligent systems against evolving threats.

What You’ll Learn

Develop the ability to analyze and secure intelligent systems where digital decisions directly impact physical outcomes

  • Understand the architecture of intelligent systems across physical, sensing, control, and decision layers
  • Identify vulnerabilities in AI models, autonomous systems, and cyber-physical environments
  • Analyze adversarial machine learning threats including evasion, poisoning, and model exploitation
  • Apply threat modeling techniques tailored to interconnected and real-time systems
  • Evaluate risks across supply chains, hardware components, and software dependencies
  • Design security controls that address both digital integrity and physical safety
  • Implement monitoring, anomaly detection, and autonomous response strategies
  • Build resilient systems capable of maintaining safe operation under compromised conditions

Business Takeaways

Recognize how securing intelligent systems directly protects operational continuity, safety, and strategic infrastructure

  • Reduce risk by understanding how cyber attacks translate into physical consequences
  • Strengthen protection of critical infrastructure such as transportation, utilities, and smart cities
  • Improve resilience through layered security and consequence-aware design
  • Enhance decision-making by integrating security into system architecture and lifecycle
  • Mitigate supply chain risks across hardware, software, and AI components
  • Support compliance with emerging regulations around cyber-physical and AI systems
  • Enable proactive defense against evolving AI-driven and autonomous threats
  • Safeguard organizational reputation by preventing high-impact system failures

Syllabus: 5 Sections to Transformation

The CA306 program explores the security of intelligent and cyber-physical systems, where software decisions directly impact the real world. It spans everything from AI model vulnerabilities to sensor-level attacks and large-scale interconnected infrastructure risks.

syllabus overview

Justify Training to Your Manager

section 1

FOUNDATIONS: INTELLIGENT SYSTEM SECURITY

Understand how AI, autonomous systems, and cyber-physical systems merge digital and physical risk.
Examine how system architecture and trust relationships influence real-world security outcomes.

TOPICS COVERED

  • Intersection of digital logic and physical systems.
  • Five-layer architecture (Physical, Sensing, Control, Decision, Coordination).
  • Trust models and system interaction pathways.
  • Attack surface vs consequence surface.
  • Risk categories (Loss of Control, View, Manipulation).

LABS

  • 5 Layers Architecture Mapping

section 2

AI SECURITY: MODEL WEAKNESSES & ATTACKS

Shift into how intelligent models behave under adversarial conditions.
Analyze how small input changes can break systems that appear highly accurate.

TOPICS COVERED

  • Machine learning lifecycle (data, training, deployment)
    Types of machine learning systems.
  • Evasion attacks across image, text, and time-series data.
  • Gradient-based adversarial techniques.
  • Data poisoning and hidden backdoors.
  • Model extraction and inversion risks.

LABS

  • Adversarial Input Simulation

section 3

AUTONOMOUS SYSTEMS & SENSOR SECURITY

Move into systems that interact with the physical world through movement and perception.
Evaluate how sensors, control logic, and communication channels become attack vectors.

TOPICS COVERED

  • Autonomous system architecture and control flow.
  • Navigation attacks (GPS spoofing).
  • Command and control channel security.
  • Multi-sensor fusion vulnerabilities.
  • Hardware roots of trust and embedded security.
  • Firmware, protocols, and edge device risks.

LABS

  • GPS Spoofing Scenario Analysis

  • Firmware attack Surface Assessment.

  • Sensor, Decision & Action chain Analysis

section 4

SMART INFRASTRUCTURE & SUPPLY CHAIN SECURITY

Expand into large-scale intelligent environments and interconnected systems.
Understand how dependencies and external components introduce systemic risk.

TOPICS COVERED

  • Smart infrastructure and connected environments.
  • Critical systems (transportation, utilities, public safety).
  • Cascading failures in interconnected networks.
  • Digital simulation and system modeling.
  • Hardware and software supply chain risks.
  • SBOM concepts and secure distribution.

LABS

  • Infrastructure Cascade Failure Analysis

section 5

MONITORING, DETECTION & RESILIENCE

Conclude with defensive strategies for detecting and responding to system anomalies.
Focus on maintaining reliability even when systems are partially compromised.

TOPICS COVERED

  • Observability in complex systems.
  • Behavioral anomaly detection.
  • Large-scale monitoring strategies.
  • Automated response and recovery.
  • Resilience and fail-safe design principles.

LABS

  • Architecture Design Anomaly

Course Schedule
& Pricing

Looking for Group Purchase Options? See below

Next Start Date

March 5, 2026

Duration

14 Weeks Intensive

Format

Live with Zoom Meeting

What's Included

499€

Seats Filling Fast for January 2026

Location

Start Date

Start Time

Prishtina, Kosovo

March 20, 2026

10:30 AM (CEST)

Prishtina, Kosovo

April 15, 2026

4:30 PM (CEST)

Prishtina, Kosovo

May 10, 2026

11:00 AM (CEST)

Next Start Date

March 5, 2026

Duration

14 Weeks Intensive

Format

Live with Zoom Meeting

What's Included

499€

Seats Filling Fast for January 2026

Location

Start Date

Start Time

Prishtina, Kosovo

March 20, 2026

10:30 AM (CEST)

Prishtina, Kosovo

April 15, 2026

4:30 PM (CEST)

Prishtina, Kosovo

May 10, 2026

11:00 AM (CEST)

Next Start Date

March 5, 2026

Duration

14 Weeks Intensive

Format

Live with Zoom Meeting

What's Included

499€

Seats Filling Fast for January 2026

Location

Start Date

Start Time

Prishtina, Kosovo

March 20, 2026

10:30 AM (CEST)

Prishtina, Kosovo

April 15, 2026

4:30 PM (CEST)

Prishtina, Kosovo

May 10, 2026

11:00 AM (CEST)

Frequently Asked Questions

Mission-critical information for prospective operatives

Why do intelligent systems introduce new cybersecurity risks?

Intelligent systems combine software, sensors, autonomous decision-making, and physical operations into a single operational chain. This means attackers can influence not only data, but also real-world actions such as movement, routing, industrial control, and autonomous behavior, turning cyber compromise into physical consequence.

Machine learning systems rely on patterns and statistical correlations rather than true understanding. Because of this, small manipulations in data or inputs can mislead models and cause incorrect decisions, even when the system appears to operate normally.

Adversarial attacks manipulate AI inputs in subtle ways to force incorrect predictions or classifications. These attacks can target images, text, sensor data, or sequential systems while remaining difficult for humans or traditional validation systems to detect.

Autonomous systems operate at a speed and scale where humans cannot constantly verify every action. Because of this, systems must rely on strong identity, hardware-backed trust, attestation, and continuous validation to ensure devices and services are authentic and operating in a trustworthy state.

Resilient systems are designed with the assumption that software and decision logic may eventually fail. Instead of relying entirely on software trust, resilient architectures use safeguards such as semantic integrity checks, hardware interlocks, safety systems, and independent emergency controls to prevent digital compromise from becoming uncontrolled physical impact.

0
    Your Cart
    Your cart is empty