Print as pdf if you want a pdf! If you want a nicer printout, click off the browser's automatically added header and footer.

Blekinge Institute of Technology
Department of Computer Science

Revision: 2
Reg.no:


Course syllabus

Malware Analysis

Malware Analysis

6 credits (6 högskolepoäng)

Course code: DV2642
Main field of study: Computer Science
Disciplinary domain: Technology
Education level: Second-cycle
Specialization: A1N - Second cycle, has only first-cycle course/s as entry requirements

Language of instruction: English
Applies from: 2026-09-10
Approved: 2026-09-10

1. Decision

This course is established by Dean 2023-05-03. The course syllabus is approved by Head of Department of Computer Science 2026-09-10 and applies from 2026-09-10.

2. Prior knowledge

2.1 Entry requirements

Admission to the course requires 30 completed credits consisting of courses in Computer Science, Software Engineering or equivalent, and include courses in Object Oriented Programming, 5 credits, Data Structures and Algorithms, 5 credits, Operating Systems, 5 credits, as well as Network Security, 5 credits. English 6.

3. Objective and content

3.1 Objective

The aim of the course is for the student to learn how malicious and malicious software (Malicous Software) can be analyzed in a safe way. Such an analysis is the first step in a systematic approach to prevent or neutralize the malware. The focus is on the analysis of advanced methods used in the manufacture of so-called "cyberweapons" and on practical countermeasures to detect and neutralize these.

3.2 Content

4. Learning outcomes

The following learning outcomes are examined in the course:

5. Learning activities

6. Assessment and grading

Modes of examinations of the course

Code Module Credit Grade
2705 Laboratory Session 1 2 credits GU
2715 Laboratory Session 2 1.5 credits GU
2725 Laboratory Session 3 0.5 credits GU
2735 On-Campus Examination 2 credits AF

The course will be graded A Excellent, B Very good, C Good, D Satisfactory, E Sufficient, FX Failed result, a little more work required, F Fail.

The examiner may carry out oral follow-up of written examinations.

The information before the start of the course states the assessment criteria and make explicit in which modes of examination that the learning outcomes are assessed.

An examiner can, after consulting the Disability Advisor at BTH, decide on a customized examination form for a student with a long-term disability to be provided with an examination equivalent to one given to a student who is not disabled.

7. Course evaluation

The course evaluation should be carried out in line with BTH:s course evaluation template and process.

8. Restrictions regarding degree

The course can form part of a degree but not together with another course the content of which completely or partly corresponds with the contents of this course.

9. Course literature and other materials of instruction