Slashdot Mirror
Recommendations for Graduate Programs?
xblanksx asks: "I am a soon to be college graduate and I have been looking into graduate programs pertaining to computer forensics and computer crime investigation. So far the only program I have been able to find is the 'High Technology Crime Investigation' program offered through GWU. Since I am finding it rather hard to find any other programs, what other graduate programs might be out there pertaining to computer investigations?"
I think that you'll have plenty of time to think about it. I don't know about your particular specialization, but most graduate schools require replies by April 15 from all of the people they offered admission to.
I'm in the middle of figuring out which school I'll be attending in the Fall, and had all of my applications in by Jan 1.
http://main.uab.edu/show.asp?durki=69261n tent/degrees/ACAD_PROG_71.cfm
http://www.graduate.ucf.edu/CurrentGradCatalog/co
These were just on the first two pages of a google search for "computer forensics graduate school". You couldn't have possibly looked that hard.
If you're interested, drop me an email, or contact the head of the lab.
By no-means am I trying to demean you or your goals (first year chem grad-student), but that is very much a niche sounding field. Personally, I would go to a FBI field office and ask them, tell them what you want to do, and unless you find an ass they'll probabbly help you (as it can help them).
Also, I saw ITT-Tech advertising with just such a program, so that might degrade your college-graduate status. (Damn it, that piece of paper is WORTH SOMETHIN')
Frankly, I think that the much-bally-hoooed "age of digital warfare" has been upon us, but we just see it as furniture. Spyware and malware is or should be illegal, finding the perp should be an FBI enforcement issue. I doubt highly that terrorist organizations are sitting on thier collective laurels with respect to digital and information warfare. I'm SURE the army has 'information warriors' in thier propaganda arm.
Anywho, best of luck to you my fellow Gen-Xer (Are we still called that? Or maybe echo-boomer).
--sig fault--
CyLab at Carnegie Mellon has an education component. They are also aligned with CERT.
If you're fresh out of college, I suggest hunting for a job. Work in the IT field for a while-- try to get an internship or work on the business side. Not sure what the job market looks like for new grads these days, but I know it's better then a few years ago.
School is fun, but you need some real world experience in order to function in this world. Universities tend to be a bit isolated with their approach to things, and their teachings don't necessarily reflect reality.
If you go straight to grad school, there's a big risk that you'll spend $40,000 and fail to focus on the right skills.
After a few years out here, you'll have a *much* better idea about what sort of program you want to go into, and you will be wayyyy more motivated when you are actually go back to grad school.
"Can of worms? The can is open... the worms are everywhere."
You could check out some of the schools which the NSA reccomends for security in general. They have a list of National Centers of Academic Excellence in Information Assurance Education (CAEIAE). The link is http://www.nsa.gov/ia/academia/caeiae.cfm
There's no place like ~/
GWU has been acquiring a reputation for being unfair to students that they see as "abnormal" or "problematic", even if those students are not dangerous in the least. I don't know if this would affect the story submitter or just perhaps some people discussing the story, but it's something to be aware of. Not that this should rule out a good school with a good program---you just have to research what you're getting into so you don't commit a faux pas against local customs.
http://df.shsu.edu/
They're a medium sized University in east Texas with a young program.
What are you looking for in a graduate program? If you are looking for a bunch of classes to teach you computer forensics, I'm not sure where to direct you. I think that's a little too specialized for most graduate programs to meet. If you are looking to conduct research into better ways of doing computer forensics, then I am willing to bet that most good computer security groups would love people working on that. You can look at schools with good computer security research groups like Berkeley, MIT, Cambridge, Princeton, Rice, UCSD, etc.
I spent the last year doing a graduate program search (for geography, not CS, but same things apply), so the tips are fresh in my mind.
There are two schools of thought on how to search for a grad school. The first is to find a professor that you like and then look at the program. The best way to do this is to look through all the papers that you've written as an undergrad and look for the names that show up often in your bibliography. These are people who are interested in what you like. Chances are, they are surrounded by other people doing what you like. Take a look at the program that they teach in, do they offer classes that you like, are other people publishing things that interest you. The danger here to two fold. The first is that the person who you like is a jerk in person, you can find that out by corresponding with them by e-mail, see if they pay attention to you and treat you with respect. Ask your current professors about the person, most academic fields are pretty small, and word gets around. If you ever visit the campus, talk to their grad students and other people in the program. This is the best approach to take if you plan on either doing a ph.d, which is mostly working with an advisor one-on-one, or plan on staying in the same place for both masters and ph.d. One last hint, make sure they'll be staying at the institution, I almost got burned on this one.
The second school of thought, better if you're getting a masters and then moving into the private industry, is to find a program that interests you. Since you seem to have tried this, I won't add much more here except to say that I hear at Carnage Melon has a good computer security program, not sure if its what you're looking for though.
Sleep is for the weak!
As far as employability is concerned, investigative agencies are going to be more concerned about coursework rather than a title on your degree certificate stating, "Computer Forensics" or "Computer Investigations". You're better off concerning yourself with getting a masters in computer science, and taking some additional courses in the criminology and/or law departments at whatever university you end up going to, or vice versa. Computer forensics/investigations is still a relatively new field (not to mention specialized), so the lack of degrees with that title on it is to be expected.
Depending on what your current degree is in, you might want to follow it up with a degree in Computer Science with a heavy emphasis on Computer Security and Information. A while back, when I was applying to graduate schools, I found that there were very few universities, on the list that I had created, that specialized in Computer Security; albeit, I was more concerned with their EE/Computer Engineering than Computer Science.
r ses.html), New York University (http://www.cs.nyu.edu/web/Academic/Graduate/cours es.html), George Washington University (http://cs.seas.gwu.edu/academics/graduate/courses /), Virginia Tech (http://www.cs.vt.edu/site_pages/courses/), and the University of Florida (http://www.cise.ufl.edu/student_services/grad/cou rses/) that might suit your needs. While computer forensics is useful for a variety of agencies and institutions, the fundamentals behind those methods are important, as it governs how new tools can be created. MIT (http://student.mit.edu/@5675354.9107/catalog/m6a. html) also has a very interesting course selection, and the techniques and research coming out of there are very top-notch. If I had the time, I'd attend more lectures there, as the content is very diverse and alluring, especially when a grade is not on the line.
With that said, I do know that there are a variety of courses available at places like Johns Hopkins University (http://www.cs.jhu.edu/academics_catalog_grad_cou
Mississippi State has courses in Computer Forensics and in Information Security at the graduate level. Here's a little blurb about it: http://www.cse.msstate.edu/RESEARCH/security/
also, I think if you have trouble finding grad schools in your particular field of interest, you should talk to your professors to see if they can give you some pointers. frankly, slashdot is the last place i'd go to if I had questions about grad school. heh.
Purdue University's Center for Education and Research in Information Assurance and Security.
...
http://www.cerias.purdue.edu/
It's a well-known and top-notch program, one of the first of its kind.
Its head is Eugene Spafford, who seems to be well-known in tech circles and is part of the Center's claim to fame.
CERIAS offers, I think, both masters and PhD's.
I looked at it a few years ago, but I'm sure that it's still worth looking into. I think that their site recently was dugg for some security checklist or something
I don't know about CSI-ish degrees, but GWU (I assume you mean George Washington University in Washington DC) is a great school overall. And the location is great.
-- bearclaw
The Newest issue of U.S. News and World Report is about top schools for graduate study.
Those poor bastards, they have us surrounded. Now we can fire at them in all directions!
I think certification would do more to bolster your career. How about SANS GIAC?
Although it may not apply to you specifically, I strongly recommend you first read the Ph.D. Glut. You mention graduate school and I assume you mean you plan to get a Masters, but the article is still worth a look before you plunge into the pool.
The Institute for Security Technology Studies is based there: http://www.ists.dartmouth.edu/
...but that sounds like a job description, not a graduate research program.
I had a friend who finished his EE degree and wanted to do video games. Instead of showing off his programming skills to potential employers or going to the CS department, he decided to join a video game graduate program...what a waste. How many programmers at EA do you think had a degree in video gaming (btw fuck you digipen and full sail scam artists) and how many had a degree in computer science?
Computer Crime Investigation isn't really a graduate school kind of thing. It's kind of like if you went to graduate school and ended up with a degree in business. Oh, whoops. (Sorry MBAs, but you know your degree is a joke). What you want to learn is best learned by going in the field. I'll leave you with a quote from a professor of mine:
"Of course mathematics is wonderful and anyone who goes to graduate school in mathematics is much more brilliant than anyone who, say, chooses a starting salary of $100K on Wall Street instead."
"Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman
Look into NSF funded programs for CyberCorps. They have programs at various universities nationwide. I think they have some focus in the area you are looking for. Bonus: Get Master's for free and get a job with Gov't when you are done.
Depends what you're looking for. If you want to do it "convenient and cheap", you might be interested in the program I'm pursuing. I'm half-way plus through a Masters of Science in Applied Computer Science with a concentration in Information Assurance at Columbus State University, Columbus, GA. It's an on campus degree, but enough of the courses are offered remotely, they also offer a distance learning version. You probably understand the trade-offs of not being in a face-to-face class, but I'll still end up with a M.S. from an accredited state university and be exposed to everything from Forensics to Auditing to Penetration testing to Network security, etc. And the price is UNBELIEVABLY inexpensive!!/
http://cs.colstate.edu/html_hi/programs/grad.aspx
Price - approx $5000 plus books
Another choice is to get a computer-related degree from "wherever" and add expertise through programs like this:
http://www.kennesaw.edu/coned/sci/index.htm/
You will get more up-to-date info through seminars like these and more practical "real life" applications than through most academic courses which need to cover a broader spectrum and use published books (which already puts them 6-18 months behind the most current tools).
I know this is a crazy idea, but maybe you could call up some police departments or FBI offices and, I don't know, maybe ask them? Not to be a smart ass, but it seems like the obvious answer is to go ask the people that have those jobs.
Don't be afraid to talk to people. Especially when you aren't a criminal or complaining, most law enforcement people are more than happy to talk to people.
http://www.popularculturegaming.com -- my blog about the culture of videogame players
I am a Ph.D. student in computer engineering at Iowa State, and our program may be of interest to you. We have several faculty members doing forensics research in areas such as detecting illegal pornography and attack attribution. The department also has a computer forensics lab, and offers a specific course in Computer Forensics that includes projects where drive images are examined using EnCase and FTK in order to locate and recover evidence.
Probably the best advice I can give on selecting any program is checking out the courses that are offered and what the faculty in that department are working on. It may take some time and effort, but can really pay off. An additional benefit with our program at Iowa State is that most of our computer security courses are offered through distance education. So if you are undecided, you can take a course or two and decide if it is something you want to pursue.
Reading code is like reading the dictionary - you have to read half of it before you can go back and understand it.
I'm coming to the end of my first year (of two) at a part-time MSc Information Security at the Royal Holloway, University of London. The course is based at the Egham campus in Surrey (about 30 mins from London). We have a Smart Card research partnership with Vodafone cellular and some very strong industry ties including Oracle.
IMHO, the lecturers are excellent. They include a former police inspector who founded the UK's computer crime unit plus a former director of GCHQ's CESG (GCHQ is the UK equivalent of NSA).
The majority of students are from China, the Middle East and the US/Canada. Apparently we have a course link between us & Purdue, but I'm not quite sure what is involved in that.
I highly recommend RHUL. As I work in InfoSec already, I am aware that the material they send you away with is a great foundation for a career in the industry.
GOOD LUCK!
i work for that school and the reason we didn't accept you is because of your flawed character and general attitude problem.. to which you appear to be oblivious, but which everyone who meets you is aware of immediately.
my password really is 'stinkypants'
Try my discipline: Geography, especially GIS for Forensics. Lots of programs have people interested in the topic, especially since homeland security money is so available. Go on http:///www.aag.org and search through the Annual Meeting proceedings for names of people doing work in this area. Apply to those programs. Include in your application letter a one paragraph blurb about a thesis topic. I did a side project for law enforcement agency that wanted to "predict" where meth labs would most likely happen. Using demographic data and some good old fashioned kriging we were able to locate hot spots that correlated strongly to past meth lab activity. Cops each shit like that up.
Comparing it to Windows will be a moot point, since El Dorado is going to have a 40% larger code base than XP.
Get some real world experience first. What if you decide you hate it? Seriously, a background in CompSci does not a forensic expert make. You'll have to deal with stupid government lifers, endless reams of paperwork and regulations, etc. Maybe work in a "corporate" world first, learn what you like and don't like. For instance, I used to work for a dotcom, and discovered that I hated working for a company that sold IT services/products. Why? The snake oil that flew around. The divide between the technical expertise of my fellow engineers and I , and the customer that we inevitably had to bamboozle to help Sales make the sale. Yuck. So now I know - don't do that.
I want to delete my account but Slashdot doesn't allow it.
Just don't contact them via 911 for this kind of question. Then they would be much less happy about chatting with you!
Most police agencies require you spend time in the field doing police type activities (catching criminals, dealing with domestics, etc) before you can move on to other things. I imagine Foresnics is probably something that is more OJT then degree taught. My recommendation, get your BS and apply to FBI, DHS or state police departments.
How about SANS.edu??
A lab at SFU is just starting a joint venture with the RCMP. It's in the early stages and is still ramping up. I believe projects with Criminology have begun.
I don't know whether it says something about me or about Slashdot, but I initially read that as "A lab at STFU is just starting a joint venture with the RCMP."
This sig has absolutely no significance and serves only to take up screen space and waste the time of the reader.
Generally, the way to go about it is to find a professor or a group of professors doing interesting research, and apply for those programs. Most people I know that followed that path were happy with where they ended up.
;).
And, as a side note, don't get caught up looking at a program that says "Computer Forensics" on it. There are only a few for a reason. It takes a strong general education in math and computer science and computer engineering to do that sort of work. So, you should get a detail look at some CS and CE programs. I would say, actually, that Computer Engineering programs might be the best of all. A lot of computer security issues, as you know, occur at low levels that CS people _generally_ muck around with (because of their twin fascinations with Java and theory
====
Crudely Drawn Games
A masters in digital forensics isn't too different than a paper MCSE. You need lots of real world hands on. As anyone who has a BS in Comp Sci will tell you, much of what you learn in college isn't too useful in the real world.
If you are about to have a CS degree, apply to the FBI, DEA, Secret Service, ICE, or some other federal agency. They are begging for people with technical degrees. You will likely be the resident tech guru and quickly get an assignment and trainig in forensics. If you like it you can then likely get them to pay for your masters.
Ninjas don't carry tic tacs
The Univeristy of Rhode Island is trying to teach this kind of stuff I believe. It's not the worlds most prestigious graduate program, but I think they've been doing the forensics stuff for a few years, so the instruction in that topic might be well developed.
The choice in the field eventually comes to whether you're looking for short-term bucks or a career that will be fun for the next 2-4 decades. If you want it to be fun for the long-run, don't be too quick to specialize in a narrow IT area. If you're just looking for bucks, get ready to be bored for a long time. I see lots of people who've been in IT for 10-20 years who hate what they do and hate themselves for doing it, but stay because the money's good. It's scary to think that they spend so much of their life being unhappy.
Most people I meet in my work (both inside and outside IT) are working in a field different from their degrees. It tells me a lot about how little we know of a field before we actually enter it, but it also tells me a lot about how the easily knowledge from one field translates to another.