Next Application Deadline July 1 Apply Now

Curriculum: Threat Intelligence

The Middlebury Institute Master of Arts in Threat Intelligence is a 12- or 16-month, 36-credit program.

Start Dates Credits Practicum Second Language Program Chair
August or January 36 Optional Not Required Katharine Petrich

Requirements

Core Coursework (11 credits)

Skills Courses (6 credits)

Methods Courses (7 credits)

Electives (12 credits)

Core Coursework (11 credits)

  • Threat Intelligence Foundations (2 credits)
  • Cyber Warfare (2 credits)
  • Intro to Intelligence (4 credits)
  • Policy and Data Analysis (3 credits)

Skills Courses (6 credits)

  • Intro to Intercultural Competence (2 credits)
  • Conflict Transformation: Principles and Practice (2-4 credits)
  • International Security Research & Analysis (2 credits)
  • International Crisis Negotiation Exercise (1 credit)
  • Field Research Interviewing (1 credit)
  • Writing and Briefing Memos (2 credit)
  • Research on the Dark Web (2 credits)
  • Advanced Communication Strategies (1 credit)
  • Qualitative Data Analysis (3 credits)
  • Balkans: Peace, Conflict, and Resolution (2-3 credits)

Methods Courses (7 Credits)

  • Advanced Data Analysis (3 credits)
  • Geographic Financial Crime Risk Modelling (1 credit)
  • Blockchain Analytics (2 credits)
  • Drones & Surveillance (1 credit)
  • SQL (1 credit)
  • GIS (4 credits)
  • Network Analysis (3 credits)
  • Advanced GIS (4 credits)
  • Cyber Practicum (4 credits)
  • Open Source Tools for Online Investigations (2 credits)
  • Python (2 credits)

Electives (12 Credits)

You may use electives to focus your coursework, take courses across focus areas, or take up to 4 credits from other programs.

WMD Proliferation

  • Introduction to WMD Nonproliferation (4 credits)
  • Security and Arms Control in NE Asia (4 credits)
  • NPT Simulation (4 credits)
  • Open Source Tools for NPTS (4 credits)
  • Nuclear Research Reactor Practicum (2 credits)
  • Strategic Export Controls (2 credits)
  • Nuclear Power and Nonproliferation (1 credit)
  • Israel and the Bomb (2 credits)
  • Evolution of Chinese Nuclear Policy (4 credits)
  • Deter and Influence Terrorism and WMD seminar (4 credits)
  • Proliferation and Intelligence seminar (4 credits)
  • Security and WMD in the Middle East (4 credits)
  • Nuclear Weapons in South Asia (4 credits)

Financial Crime

  • Financial Crime Typologies (4 credits)
  • Financial Crime Prevention Practicum (4 credits)
  • Intro to Crypto, Web 3.0 & DeFi (2 credits)
  • Proliferation Financing Cases (2 credits)
  • Legal Aspects of Financial Crime (3 credits)
  • Corruption seminar (4 credits)
  • Terrorism Financing seminar (4 credits)

Terrorism

  • Introduction to Terrorism (4 credits)
  • Transnational Crime & Terrorism (1 credit)
  • Terrorism and Counterterrorism in Africa (1 credit)
  • Political Violence in LatAm (4 credit)
  • Emergency Response to Terrorism (2 credits)
  • Chem & Bio Warfare & Terrorism (1 credit)
  • Countering Violent Extremism (4 credits)
  • Current Trends in Terrorism Research (4 credits)
  • CBRN Terrorism (4 credits)
  • Terrorism in South Asia (4 credits)
  • Security and Violence in SE Asia (4 credits)
  • National Security Practicum (4 credits)

Other Electives

  • Threat Intel Practicum (6 credits)
  • Security and Diplomacy in Africa (4 credits)
  • Cybercrime (2 credits)
  • Cyber 9/12 Simulation (2 credits)
  • Crypto Threat Intelligence Practicum (4 credits)
  • Courses from other programs with preapproval from Threat Intelligence academic advisor (up to 4 credits)

Projected Course Availability

This table outlines anticipated offerings for the coming two academic years. Please note that the projected course availability may be subject to change at any time, and, depending on the circumstances, the Institute may not be able to provide advance notice of changes. 

Enrolled students should consult the Course Schedule for course dates, times, and locations for the current and upcoming semester. Degree maps for enrolled students are provided via Canvas through the “Front Desk” site.

  • Offered in:
    FA25 SP26 FA26
    offered in: FA25
    offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    An introductory survey of research methods, with special attention to how research can be utilized to inform policies related to international security. The course gives particular emphasis to the processes of identifying research topics and designing research projects. It will also address the basic elements of doing policy analysis. Students who complete the course will be able to read with comprehension and critically assess research produced across a wide range of qualitative and quantitative research methods. The course will also address how to write up and present research proposals and finished research products, and will consider the ethics of doing research. The course will be conducted primarily in lecture format, but some class time will also be devoted to exercises that involve active student participation.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    This course examines the role of intelligence in the conduct of US national security. The course will cover the basics of intelligence, to include the intelligence cycle, intelligence requirements, types of collection and analysis, and the roles and capabilities of organizations that make up the US intelligence community. The course will look at the role of intelligence over history and include case studies.
  • Offered in:
    SP26
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    This course introduces students to the formulation of U.S. national security policy. It summarizes the roles played by different governmental actors, including the President, Congress, and relevant bureaucratic departments and agencies, and describes the interagency process. It then covers the influence of domestic politics on national security policy, including the impact of interest groups, the media, and public opinion.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    This class provides a comprehensive introduction to the field of threat intelligence. Students will explore the core methods, tools, and sources used to identify and analyze threats across various domains, including physical security, geopolitical risks, and emerging challenges to gain a foundational understanding of how threat intelligence informs decision-making and risk mitigation strategies. The course examines key topics such as open-source intelligence, human intelligence, social media monitoring, and ethical considerations in intelligence work. Additionally, students will explore the wide range of careers available in threat intelligence, spanning government agencies, private organizations, and non-profit sectors.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    TBD
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    This course is a simulation of the third NPT Preparatory Committee (PrepCom) meeting, which will be held in New York from April 28-May 9, 2025. The focus of the next PrepCom is hard to anticipate, but it is apt to be especially contentious as it is charged to present recommendations to the next NPT Review Conferenced scheduled for 2026, including with respect to nuclear disarmament, nonproliferation, and peaceful uses of nuclear energy, as well as regional security. Among major subjects likely to be debated are: the pace of and potential for meaningful nuclear disarmament, arms control, and nuclear risk reduction; further strengthening of the NPT review process; the erosion of nuclear norms accentuated by imprudent rhetoric about nuclear weapons use and attacks on and foreign occupation of civilian nuclear facilities; the integrity of nuclear security assurances; the deployment of nuclear weapons outside of national territories, sharing of naval propulsion technology; viability of nuclear-weapon-free zones; DPRK nuclear brinkmanship; Iran’s nuclear intentions; the future of the CTBT; the potential for nuclear terrorism; and the prospects for peaceful nuclear use. The base point for the simulation is the “real world” at the time of the course. 
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    This course is an introduction to open source analysis used in the context of nonproliferation and terrorism studies. The instructors will give policy lectures as well as hands-on training in the lab. The course is designed as an overview of geospatial and data analysis techniques which are only just recently being applied to the nonproliferation and terrorism research fields. Students will study policy and intelligence analysis using deep web searching, ground and satellite imagery analysis, basic GIS, 3D modeling, crowd-sourcing, text mining, and network analysis.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    “But what if they’re lying?” By the end of the course, students will know exactly how to respond to the most common question ethnographers face. This workshop will introduce students to a key qualitative data methodology: conducting ethnographic and semi-structured field interviews. It will provide an overview of qualitative research techniques, specifically focusing on the development of effective interviewing skills to uncover the depth of human stories and perspectives. A significant portion of the course will center on researching in complex environments and will include a discussion on research ethics. Through practical exercises, participants will gain firsthand experience in designing an interview plan, formulating impactful questions, finding and establishing a connection with subjects, and employing analytical strategies to interpret complex data.
  • Offered in:
    SP26 (j-term) SP27 (j-term)
    not offered in: FA25
    offered in: SP26 (j-term)
    not offered in: FA26
    offered in: SP27 (j-term)

    Course Description

    This practicum is organized within the framework of a partnership between the James Martin Center for Non-proliferation Studies, Institute of International Studies at Monterey (MIIS) and the Faculty of Nuclear Sciences and Physical Engineering of the Czech Technical University in Prague, Czech Republic (CTU). This course relates directly to issues having to do with nuclear proliferation and nuclear terrorism. The technology, materials, and know-how involved in running a nuclear reactor are potentially “dual use” and can be diverted to efforts to develop nuclear weapons. For these reasons, international efforts to prevent proliferation and terrorism require putting nuclear reactors under safeguards and providing physical security of the nuclear materials. The course will enable students to observe how safeguards and nuclear security measures are implemented in practice.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    TBD
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    Strategic export controls – which include export, brokering, transshipment and transit controls, as well as sanctions and supply chain security mechanisms – are important tools used in international and national security efforts, including countering WMD proliferation and terrorism. Traditionally, they have focused on raising the cost of WMD development programs and reducing access to advanced military capabilities by terrorist organizations or states active in proscribed proliferation activities or regional conflict. Strategic export controls have also become a prominent feature of the international trade landscape, and as such, are calibrated to facilitate legal trade in dual-use goods and technologies while reducing risk of instability and conflict. This lecture course will explore the role of strategic export controls in balancing security and trade. Course participants will learn how strategic controls are applied at global, multilateral, national and industry levels. Course participants will also acquire an understanding of policies and legal-regulatory frameworks used by governments to shape strategic export controls – as well as strategies used by exporters in industry and the private sector to comply with them. The course will also examine challenges to these controls, in the form of illicit trafficking networks, evolving supply chains and new means of distribution, and emerging dual-use technologies – and implications for the future of balancing security and trade. The course will also feature a ‘red-teaming’ exercise, simulating the operation of trafficking networks. The exercise will give course participants an opportunity to apply knowledge gained through the lectures and readings to better understand illicit procurement and diversion of dual-use goods and technologies – and consider strategies for addressing this challenge while facilitating legal trade and its advantages for global prosperity and human welfare.
  • Offered in:
    SP26 FA26 SP27
    not offered in: FA25
    offered in: SP26
    offered in: FA26
    offered in: SP27

    Course Description

    The goal of this workshop is to hone students’ professionally-relevant, policy-oriented communication abilities, including memo writing and briefing. The course will include a combination of lectures, seminar-style discussion, small working group engagement, and individual student work.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    Unlike the surface level web, the dark web is a network of sites hidden behind powerful encryption technology. Encryption allows individuals to access sites on the dark web without being easily observed by law enforcement or others. Given these high levels of secrecy, the dark web has become a hub for illegal activity, including dark web marketplaces (where individuals buy and sell illegal goods) and hacker forums (where individuals advertise and hire expert hackers). In recent years, researchers have collected dark web data to explore a range of phenomena, including the dynamics of dark web marketplaces and the characteristics of victims of double extortion ransomware attacks. In this workshop, students will learn safety protocols and ethical standards for accessing sites on the dark web. Students will learn about the range of potential data sources available via sites on the dark web and engage in hands-on exploration of these sources. Students will also become familiar with how dark web data has been used in current research , as well as how it might be applied in future research. By the end of the workshop, students will have developed an understanding of how to safely access sites on the dark web and the wide range of potential research applications for dark web data. 
  • Offered in:
    FA25
    offered in: FA25
    not offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    This workshop explores the complexities of geographic risk assessment, with a focus on financial crime (money laundering, corruption, sanctions evasion, terrorism financing and proliferation financing), but with the opportunity to apply the skills to other areas of interest. The first day will be spent critically evaluating existing risk indices and scrutinizing the quality of possible source data. On the second day students will pair up to develop their own models, spending time on selection of variables and weighting of variables, and fine-tuning models to enhance accuracy and reliability. On the third and final day, students will complete their final reports and then consider how they might develop a similar risk model for other areas of risk such as organized crime or conflict. This hands-on exercise will provide insights into how suspicious activity is identified and risks mitigated.
  • Offered in:
    SP26 (j-term) SP27 (j-term)
    not offered in: FA25
    offered in: SP26 (j-term)
    not offered in: FA26
    offered in: SP27 (j-term)

    Course Description

    The “crime terror nexus” is a major area of concern for policymakers. In a globalized world, extremist groups use criminal relationships or skills for a range of purposes: from sourcing weapons to smuggling operatives into and out of countries to ‘simply’ circumventing financial regulations designed to starve such groups of needed monetary support. Thus far, countermeasures have had uneven results in disrupting or deterring transnational criminal activities by violent non-state actors. This course will explore the problems of international crime and terrorism in today’s strategic environment, with a particular emphasis on the ‘why’ and ‘how’ of the crime-terrorism relationship. Students will gain an understanding of the factors that have contributed to the proliferation of transnational crime and terrorism, the types of crimes that pose the greatest threat to lawful societies, the institutions and tactical responses that have been developed to combat transnational crime, and the extent to which transnational crime and terrorism threaten the national security interests of the United States and the world community. By the end of this course, students should be familiar with the prevailing explanations for why terrorist groups use crime in the modern era, the organizational consequences of such a funding stream, and how states can and should respond to these challenges. 
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    Students will develop and hone digital investigation techniques as they learn a risk-based approach to tracing the source of blockchain funds and de-anonymizing cryptocurrency transactions with cryptocurrency forensic tools. From Cryptocurrency 101 to writing reports to aid law enforcement with writing subpoenas, after the completion of the course students will be able to: -Trace the source of blockchain funds and de-anonymize cryptocurrency transactions with cryptocurrency (or blockchain) forensic tools - Quickly risk-rate tokens, transactions, and digital asset businesses - Use advanced open-source techniques (like darknet research) to help complete enhanced due diligence reports - Produce reports that can be given to law enforcement for asset recovery
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    TBD
  • Offered in:
    SP26
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    This workshop will examine human trafficking as an emerging public issue, while focusing on the real-world challenges to identifying and rescuing victims, prosecuting traffickers, while also addressing the socio-economic and cultural dynamics that are leveraged by traffickers. This course will focus heavily on the multi-disciplinary, victim-centered approach promoted through international and domestic anti-human trafficking protocols and policies, including the Trafficking Victims Protection Act of 2000 and the subsequent reauthorizations. The course will include an examination of relevant existing data, types of trafficking, legal definitions, domestic and international efforts to combat trafficking, challenges faced by law enforcement, the nexus between trafficking and other transnational crime, the role of traditional NGOs and social entrepreneurs, and corporate social responsibility. Finally, we will examine potential career opportunities related to combating human trafficking and the leadership, collaboration and consensus-building skills necessary for success, whether working in the global arena or for a local agency.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    This course will cover the basic concepts involved in the design and operation of nuclear reactors. Students will build an understanding of how nuclear reactors work and how they relate to nuclear weapons. The course will cover how various designs are more or less proliferation resistant and how reactors use and produce nuclear material. This course is strongly recommended for students considering taking the J-Term practicum held at the Czech Technical University’s VR-1 “Sparrow” research reactor
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    This course, on the evolution of Chinese nuclear policy, is divided into three parts. The first part outlines early Chinese attitudes to nuclear weapons, proliferation and disarmament, prior to and immediately following China’s nuclear test in 1964. The second part examines enduring concepts in Chinese nuclear policy, such as No First Use, and introduces students to important debates in China since the 1980s on nuclear deterrence. The third part focuses on contemporary issues and challenges that shape Chinese nuclear policy, from ballistic missile defense, to the South Asian nuclear tests in 1999, and the North Korean nuclear crisis. The nature of the US-China nuclear relationship will also be explored. The principal objective of the course is to give students a better understanding of China’s nuclear policy, both past and present. A secondary objective is to introduce to students key literature and sources, both in English and Chinese, on this issue.
  • Offered in:
    SP26
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    Why is Costa Rica politically stable with little domestic violence while Colombia has struggled with eighty years of civil conflict? Why are drug cartels a problem in Mexico but not in Argentina? This course is an introduction to the dynamics and intricacies of political violence in Latin America. Understanding why political violence occurs, how it is used, what its effects are, and how it can be countered, is crucial to a clear understanding of the problems facing states and non-state actors, as well as the dynamics of a conflict-ridden global environment. Latin America has been particularly challenged by a high level of domestic violence, perpetrated by criminal, non-state, and state actors, but has attracted less public and policymaker attention than other regions. We will cover numerous subjects, including: why non-state actors and states use violent means to pursue political ends, as well as state repression and terrorism, riots, coups, revolutions, civil wars, communal conflict, and violence by insurgents, criminals, and terrorists.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    This course provides a comprehensive introduction to the issues surrounding the proliferation of nuclear, biological, chemical, and radiological (NBCR) weapons and their means of delivery, the consequences of proliferation, and means to stem it or ameliorate its dangers.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    The Emergency Response to Terrorism Workshop is a two-weekend workshop. Students will have the opportunity to learn how emergency services function and how they respond to incidents of mass violence, including shootings, bombings, and chemical, biological, radiological, or nuclear (CBRN) attacks. Coursework will combine lecture-based instruction with hands-on, experiential emergency response training on topics such as bleeding control, explosives recognition, and CBRN response. Subject matter experts from regional emergency services organizations, all certified as instructors with the agencies pertinent to their disciplines (e.g. California POST, California State Fire Marshal, California Emergency Medical Services Authority), will join as guest instructors. Although students will gain insights into emergency services operations, and gain some practical skills, they will not earn emergency services certifications.
  • Offered in:
    FA25 SP26 FA26 SP27
    offered in: FA25
    offered in: SP26
    offered in: FA26
    offered in: SP27

    Course Description

    The course is an introduction to the subject of terrorism. The course will focus on a range of fundamental questions, such as: What is Terrorism? What causes Terrorism? Why do terrorist groups emerge and how do they end? What is extremism? Why do individuals join terrorist groups? What are lone wolf terrorists? What is leaderless jihad? These are but a few of the elements that will be explored over the course of the semester. The course also aims to expose students to a wide range of terrorist groups and ideologies.
  • Offered in:
    SP26
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    This workshop is designed to provide the student with a basic knowledge of the issues relating to… read more drone and satellite usage in a variety of situations. The workshop will focus more on the issues relating to drones and surveillance, but other issues such as satellite use will also be addressed. Consideration will be given to the use of drones and satellites to perform both commercial and military/intelligence tasks and the policy issues raised by use of drones in domestic (US) and international airspace. Issues of privacy, the 4th Amendment right to be free from intrusive searches and seizures, and the legal regimes that affect the use of drones and satellites will be discussed. The impact of changing technical capabilities and potential collisions with civil liberties in these and other areas will be addressed. This workshop will deal with the technical, policy, and legal issues involved in these subjects. It will provide the student with a working understanding of the issues involved in the current use of drones and overhead surveillance and will provide a look at the future uses and limitations, examining how civil liberties are and can be balanced against security interests.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    Over the course of this semester, students will encounter often outlandish, but very real, tales of those who commit financial crimes using many ruses, including fraudulent shell companies and existing front companies. Regardless of their techniques and schemes, one theme is prevalent: to investigate and prosecute these crimes, you must combine puzzle solving skills, organizational techniques that allow you to categorize and analyze information, research abilities and legal creativity. To effectively build prosecutions against complex criminal activity, investigators combine creative investigative strategies that work within the confines of the law, often working closely with attorneys. These matters may arise in challenging circumstances, which is very often the situation in the investigation of financial crimes, regardless of whether the cases are brought through criminal or civil enforcement. One of the goals in this course is to provide students with a strong foundation to allow them to understand the relevant legal and other governance principles applicable to global financial crime and then apply what is learned about identifying, investigating and combating those activities. In this course, we will explore multi-faceted efforts used to protect the financial integrity of private businesses and organizations from global financial crime. We will focus on regulatory, investigative (by state actors and non-government investigative bodies) and legal aspects of compliance with applicable laws and regulations. We will review corporate governance, as well as US and international investigative and prosecutorial agencies. We will also discuss the applicable judicial systems and laws. We will also spend time considering the ethical and moral implications of the underlying crimes, the purported harms, and the approaches used to prevent, mitigate and punish the criminal activity.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    Welcome to a course that delves into the heart of 21st-century power dynamics. We’ll explore how the digital revolution, spearheaded by AI and tech giants, is reshaping international security and social norms. From presidents being deplatformed to elections influenced by foreign startups, we’ll analyze real-world cases that highlight the shifting balance between governments and the private sector. The course encourages critical thinking about the ethical implications of this new world order: How do we support equity and protect democratic values in an era of unprecedented technological power? Through lively debates and hands-on projects, students will develop the skills to navigate and influence the complex intersection of technology, politics, and social justice in a rapidly evolving international system. Special attention will be given to career opportunities in this critical issue area.
  • Offered in:
    FA25
    offered in: FA25
    not offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    The counterterrorism seminar is designed to address the challenges of terrorism in the current and future global security environment in a participatory format. Specifically, the seminar briefly reviews the threat terrorism poses to liberal democratic states, citizens and policymakers, then explores how liberal democracies can best predict, prevent, preempt and, if necessary, directly combat terrorism and terrorists. The course will assess the history and future of terrorism; analyze terrorist and state strategies; and then focus on the tools to fight terrorism - military, intelligence, police, diplomatic institutions and approaches; the “targets” of counterterrorism - leaders, finances, safe havens, networks, ideologies; and the technologies used to counter terrorism - drones, social media, and more. Case studies and simulations will be used throughout the course.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    This course on Countering Violent Extremism (CVE) will examine the non-violent approaches to countering violent extremism, such as prevention (preventing violent extremism, PVE), intervention, rehabilitation, and reintegration programs. The course will also examine the pathways individuals take to extremism, with a focus on the myriad of push and pull factors that can contribute to radicalization. The course will also examine the various types of CVE/PVE programs developed by governmental and non-governmental entities. The course is experiential by design and the class will participate in the Invent 2 Prevent (I2P) program sponsored by the Department of Homeland Security, the McCain Institute and EdVenture Partners. I2P is a national competition whereupon, specifically, students in the class will create a tool, product, or initiative to prevent targeted violence and extremism.
  • Offered in:
    SP27
    not offered in: FA25
    not offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    Global, national, and local communities have struggled with individuals unfairly exploiting their positions for personal gain. Today, corruption seems more ubiquitous than ever, and the consequences are similarly vast. Corruption creates financial crises, allows terrorist attacks, facilitates WMD trafficking, sends innocent people to jail while letting guilty ones walk free, destroys the environment, wastes collective resources, causes unnecessary death and disease, damages markets, distorts news and information, increases poverty, fuels conflict, supports organized crime, and eviscerates public policy. This seminar covers corruption’s causes and consequences, the various ways to define and measure it, economic and political models vulnerable to it (and those capable of withstanding it), influencing structural and individual factors, and possible solutions to corruption. Students will leave this class with an understanding of corruption’s presentation and effects on international development, security, domestic politics, and financial systems.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    This course prepares students to compete in the Cyber 9/12 Strategy Challenge, a global competition that simulates national-level cyber crisis response. Students will develop practical skills in cyber policy analysis, crisis management, and strategic communication while working in teams to tackle evolving cyber threat scenarios. Through immersive scenarios and hands-on exercises, participants will learn to assess complex cyber incidents, evaluate their implications for national and international security, and craft comprehensive policy recommendations for decision-makers. This course is ideal for students interested in cybersecurity policy, national security, international relations, and crisis management.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    Students will apply their on-chain tracing skills gained from the Blockchain Analytics course as they research a specific crypto-related threat intelligence topic such as a ransomware group or sanctions evasion case. Students will learn how to use Crystal Intelligence’s tracing tool, research and analyze digital asset flows related to a particular case or topic, write up a full crypto threat intelligence report with detailed findings and explanations, in addition to a short brief that is understandable to executives with no knowledge of the topic. At the end of the semester, students will deliver oral presentations in front of a Panel of Experts from academia and public and private sectors.
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    Behind nearly every international crime involving money lies a money laundering scheme. In this course we look at how corrupt dictators, terrorists, drug traffickers, sanctions evaders, and North Korean cyber hackers, among others, hide and launder their ill-gotten gains. We will identify red flags of suspicious behavior and explore traditional money laundering techniques, trade-based laundering techniques, black market peso exchange, Chinese mirror trades, the use of virtual assets, shell companies, etc. There are no prerequisites for this course. What makes for a great investigator is curiosity, great research/analytical/writing skills, and broad knowledge about the world.
  • Offered in:
    FA25 SP27
    offered in: FA25
    not offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    Throughout the nuclear age – from the Manhattan Project to our own challenge of assessing with Iran’s nuclear program – the history of nuclear proliferation intelligence has been largely an history of failures. No doubt, intelligence about nuclear proliferation is a tricky business. And yet policy makers do need intelligence to make decisions on proliferation matters. The seminar is both a study of one generis problem, and also a story of a history of that problem. Understanding the complexity of the problem defines our historical survey, while history will be also an aid to appreciate better the problem. In a way, the seminar’s overall interest is to narrate and revisit the history of nuclear proliferation from the perspective of problem of intelligence. The course examines the problem of nuclear intelligence by revisiting key cases in the history of nuclear proliferation: Germany in World War II, the Soviet Union in the mid-late 1940s, the early NIEs on proliferation, Israel in the late 50s and the 1960s, India in 1974, Pakistan in the 1980s, South Africa in the late 1970s and 1980s, Iraq (twice) in the 1980s, India (second time) in 1998, and Iran today.
  • Offered in:
    SP26
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    This seminar surveys the interrelated issues of conflict, war and security in contemporary Middle East. The seminar starts with a quick introduction on the historically-reconstructed geographical definition of the Middle East, in relation to its demographic, religious and linguistic diversity of the region. The seminar then surveys historically the creation of the modern Middle East state system after World War I and the demise of the Ottoman Empire. From that introductory part, the seminar moves to focus on the creation and evolution of the Arab-Israeli/Palestinian Israeli conflict throughout the last century (1918-present). Later, the seminar also explores the geopolitical rise of Shite Iran since the 1979 Islamic revolution, the creation of the Iranian-led “resistance” axis and its impact on the conflict. The seminar examines the significance the October 7 Hamas-led onslaught on Israel, and the ensuing Gaza/Hezbollah multi-dimensional ongoing war, as redefining conflict and security in contemporary Middle East. The seminar ends with raising ideas and options how towards conflict transformation in the Middle East.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    The goal of this seminar is to develop the skills necessary to analyze the motivations and capabilities of non-state actors to acquire and use weapons of mass destruction (WMD), more specifically chemical, biological, radiological and nuclear (CBRN) weapons and materials, for terrorist purposes. Through class discussions, simulation exercises, and individual research, students will review the technical aspects of CBRN, examine the history of CBRN use by terrorists, assess CBRN terrorism threats and vulnerabilities, and assess policy responses to CBRN terrorism. Students are required to have substantial background knowledge of either CBRN or terrorism before joining the seminar. Students will prepare weekly short memos, conduct group work for integrative simulation exercises, prepare an independent research project, and have various presentation opportunities.
  • Offered in:
    FA26
    not offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    Africa is a paradox: a region with frequent coups and multiple, active terrorist groups, but also the fastest growing, youngest population in the world and the second fastest growing economic region. How will the continent navigate such a complex environment? This course considers the critical security challenges facing the African continent, with a particular focus on military coups, terrorism, and the predicament of fragile states. Students will engage with detailed case studies to understand the root causes, implications, and regional dynamics of instability, as well as the suite of tools available for responses. By examining the intricate interplay between internal vulnerabilities and external pressures, the course aims to provide insights into the complex security landscape of Africa.
  • Offered in:
    FA26
    not offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    Various parts of South-East Asia have been plagued by terrorist violence in recent decades. South-East Asia refers to the region eastward from Burma/Myanmar till the Philippines. This course studies the phenomenon of terrorism in countries of the region such as Thailand, Indonesia, Malaysia and the Philippines. Some of the groups that this course examines include – Jemaah Islamiyah, Abu Sayyaf, Moro Islamic Liberation Front – their objectives, characteristics, composition, ideologies, tactics and fund-raising. Apart from these cases, the course also examines thematic issues such as the prospect of WMD terrorism and proliferation of WMD materials, maritime terrorism and piracy, and U.S. policy on counter-terrorism in South-East Asia. We also discuss connections between groups in South-East Asia and regional and global terrorist groups elsewhere, such as Al Qaeda and the Taliban. In order to have a comprehensive picture of non-state security threats in the region, the course also examines the various insurgent movements in Myanmar. Finally, given the close security dynamics between Australia and South-East Asia, this course also looks at terrorism-related issues in Australia.
  • Offered in:
    SP27
    not offered in: FA25
    not offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    In the realm of weapons of mass destruction (WMD), South Asia is one of the key regions of analysis. This course takes a comprehensive look at the role of WMD in the strategic thinking of various actors involved in the South Asian security framework. It is important to note that South Asian nuclear issues cannot be studied in isolation from other regional and global dynamics. States such as the U.S., China, and Russia are crucial players in the South Asian strategic framework. The course examines various reasons behind WMD acquisition by India and Pakistan, concentrating especially on nuclear weapons. These factors include threat perceptions, domestic imperatives and nationalistic attitudes. A key element of nuclear weapons programs is the development of effective delivery systems such as missiles and aircraft. Analysis of such programs provides an indicator of current and future strategy. In this context, both India and Pakistan have made major strides in their cruise and ballistic missile programs to make their nuclear strategy more credible. At the same time, neither side has a clearly enunciated nuclear doctrine, although attempts have been made in this direction. This is crucial in context of a reliable command and control system and for crisis stability. Another major issue covered in this course is the proliferation of WMD materials to non-state actors or aspiring nuclear states by proliferation networks connected to South Asia. Relatedly, policymakers in the region and elsewhere are also concerned with the danger of nuclear terrorism. These are some of the prominent issues concerning weapons of mass destruction in South Asia. The two sides have periodically taken steps to prevent nuclear crises situations. Apart from nuclear weapons, this seminar also examines chemical and biological weapons policy in the two countries. 
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    The Cyber Practicum offers hands-on experience in analyzing cybersecurity challenges through the lens of international relations. In this project-based practicum, students will draft white papers, policy essays, and grant proposals, working either independently or in small teams. Projects will also include data collection and analysis from online sources, focusing on critical issues such as ransomware, hacktivism, and threat actor social media activity. Students may also propose their own research topics for white papers or projects, subject to instructor approval. Content developed through this practicum will be featured on the Cyber Collaborative’s website or submitted to relevant professional publications. Through this practicum, students will learn about emerging cybersecurity threats while developing essential skills in online investigations, analytical writing, grant writing, and data and policy analysis. 
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    In the National Security Practicum, students will work in small, problem-focused teams to develop early-stage solutions to critical defense problems. This practicum will give students hands-on experience in creating actionable solutions to complex security challenges, while broadening their technical and entrepreneurial skills. By the end of the semester, students will have contributed meaningfully to solving a key issue as identified by the Department of Defense and gained a unique perspective on how their expertise can impact national security. Note: US Citizenship is not a requirement for this course.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    The course examines how terrorist groups finance their operations. It also explores current policy approaches to curb financial support to terrorists through the application of U.S. and international sanctions, in particular how multilateral fora, such as the United Nations and the Financial Action Task Force, disrupt and deter terrorist financing. At the completion of the course, students will have a better understanding of the key tools, including law enforcement, diplomacy, and intelligence, that are used to counter terrorists’ financial networks and activities. Students will use structured analytic tools such as weighted ranking methods, scenario trees, causal flow programming, game theory, and logic to form analytic judgments. Prior coursework or professional experience in intelligence, (counter) terrorism, or finance recommended.
  • Offered in:
    SP26 (j-term) SP27 (j-term)
    not offered in: FA25
    offered in: SP26 (j-term)
    not offered in: FA26
    offered in: SP27 (j-term)

    Course Description

    This course introduces the theory and application of relational databases and structured query language (SQL). Using a project-based approach, students will practice how to retrieve, filter, analyze, and visualize datasets using SQL and then create a final application project that demonstrates their ability to employ SQL logic to solve a real-world case. The course will be conducted using asynchronous content and interactive hands-on lab sessions.
  • Offered in:
    FA25 FA26 (summer)
    offered in: FA25
    not offered in: SP26
    offered in: FA26 (summer)
    not offered in: SP27

    Course Description

    The Threat Intelligence Practicum offers students an opportunity to apply their knowledge in a real-world setting as a way to refine their analytical skills and build professional expertise. Students can choose between two pathways: embedding with an organization that conducts threat intelligence or undertaking an independent research project on a specialized topic within the field. For those pursuing an external placement, this practicum provides hands-on experience in identifying, analyzing, and reporting on threats while collaborating with experienced professionals. Alternatively, students who opt for independent research will conduct an in-depth investigation into a specific issue in threat intelligence, producing actionable insights and/or solutions. 
  • Offered in:
    FA25 SP26 FA26 SP27
    offered in: FA25
    offered in: SP26
    offered in: FA26
    offered in: SP27

    Course Description

    This course is a guided introduction to conceptualizing problems and making sense of quantitative information in the policy sphere. The course begins by introducing the theory and practice of policy analysis. The stages of the public policy process and methods for structuring policy inquiry are introduced to provide a means for deconstructing policy problems and asking relevant and practical questions in a policy context. Next the class is introduced to how such questions are addressed using quantitative tools. Topics to be covered include sampling, estimation, hypothesis testing, analysis of variance, and regression techniques. This will basically be a primer on applying inferential statistics to policy problems. The course will also include introductory training in the use of innovative statistical software, as well as Excel statistical functions.
  • Offered in:
    FA25
    offered in: FA25
    not offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    This hands-on course focuses on analysis of qualitative data. “Qualitative data”, refers to interview, focus group, written reports and visual records; hundreds of pages of them. Qualitative data sets will be provided, as there is no time in this short course to engage in primary data collection. Our entire focus will be on a) deciding how to interrogate the data (what is it you wish to know, demonstrate, reveal, test?), b) developing code books and coding, c) inter-coder reliability, and d) a wide variety of analytical approaches you can use, once you have qualitative data reduced and organized. This course emphasizes the importance of learning-through-doing, making mistakes, and collaborative analysis (qualitative inquiry is almost always improved through collaboration). Your final product will be a written analysis that summarizes your findings.
  • Offered in:
    FA25 SP26 FA26 SP27
    offered in: FA25
    offered in: SP26
    offered in: FA26
    offered in: SP27

    Course Description

    This course introduces students to the skills and concepts at the core of a dynamic and rapidly developing interdisciplinary field. Network analytic tools focus on the relationships between nodes (e.g., individuals, groups, organizations, countries, etc.). We analyze these relationships to uncover or predict a variety of important factors (e.g., the potential or importance of various actors, organizational vulnerabilities, potential subgroups, the need for redundancy, social and economic ties, growth within a network, …). Although the security field has received the greatest amount of recent attention (covert or terrorist networks), these tools can offer valuable insight into a variety of disciplines. The combination of – often stunning – visual analytic techniques with more quantitative measures accounts for much of the increasing worldwide popularity of this field.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    This class builds on Data Analysis for Public Policy and covers advanced topics commonly used in very diverse areas of policy analysis, specifically data reduction techniques (factor analysis) and non-linear models (logistic regression). The course also includes minor sections on data manipulation, formatting of raw data (flat, text files); databases; and proprietary data formats.
  • Offered in:
    FA25
    offered in: FA25
    not offered in: SP26
    not offered in: FA26
    not offered in: SP27

    Course Description

    New course - will go through ICC designation process
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    Core Course for ICC Specialization
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    TBD
  • Offered in:
    SP26 (j-term) SP27 (j-term)
    not offered in: FA25
    offered in: SP26 (j-term)
    not offered in: FA26
    offered in: SP27 (j-term)

    Course Description

    TBD
  • Offered in:
    FA25 FA26
    offered in: FA25
    not offered in: SP26
    offered in: FA26
    not offered in: SP27

    Course Description

    This course introduces the theory and application of spatial data acquisition, analysis, and display using a project based approach. Students will practice how to conceive, gather, manage, analyze, and visualize geographic datasets using the global positioning system (GPS) and geographic information systems (GIS), and use GIS for spatial analysis and decision making. The course will be conducted using lecture and lab methods; active student participation is required.
  • Offered in:
    SP26 SP27
    not offered in: FA25
    offered in: SP26
    not offered in: FA26
    offered in: SP27

    Course Description

    This hands-on, project-based course will build on the skills learned in the introductory GIS course. Working within their discipline, students will develop real-world case studies to practice GIS modeling, perform spatial data analysis, statistical analysis and temporal data analysis, test hypotheses and recommend policy based on their findings. Students will employ project management, database design and troubleshooting techniques applicable to GIS and other fields.