The course focuses on the systematic process of reverse engineering and malware analysis, which aims to reveal the internal architecture, logic and functionality of software even without access to the original source code. Students will gradually become familiar with static analysis, which includes working with assembler or tools such as Ghidra, and subsequently with dynamic analysis to observe the behavior of malicious code in a controlled environment (sandbox). An important part of the course is an in-depth examination of the Linux and Windows operating systems, their memory structures, API calls and ELF and PE binary formats. Attention is also paid to advanced techniques that malware uses to hide itself and make analysis difficult, such as polymorphism, obfuscation, code injection into other processes or anti-debugging mechanisms. Another important block is the security of IoT devices and reverse engineering of firmware in embedded systems with regard to specific architectures such as ARM. Individual lectures are structured in a way that provides new facts, while important aspects of the subject are repeated and gradually developed, with the aim of ensuring a comprehensive understanding of reverse engineering and malware analysis by students.