Help! Information Systems underGrad

Hey all,

I am currently majoring in Information Systems at a local University and plan to eventaully get a masters in Information Security. However, before I do that I need to finish undergrad.

Currently, under the Information Systems major there are two tracks - a networking track and a computer programming track. I am about to declare my major and am not sure what track would be best for computer security. Which one would beneift me more? or does it even matter?

Any input would be great.

Thanks,
Scott

IMO I think the networking track will suit a computer security professional much better. You will have a greater understanding of how and why attacks work. The programming side will just help you more in developing applications and possibly security tools. In order to make security tools, you are going to know networking inside and out.

I am also taking a Computer Networking degree and it requires us to take several programming classes. At my school, there is only like a 4 class difference between the two programs. You may want to look at the differences in the programs and see if your programs are similar. If they are similar, you can always go back for the programming degree too.

If you take the networking route, it will be much easier to get some other certs too. Some of the classes that are required for me will basically walk me through Ciscos's CCNA cert. All I'll have to do is go take the cert this summer.

Whichever route you choose, good luck!

Go with your gut. Pick the one you enjoy the best. But if you love them both then networking would be my pick as far as computer security.

yes as everyone seems to say, networking is the way to go, there will always be steady demand for network orientated people, the dot.com crash was an example of programmers being left out of work, also encryption is a large part of many courses and is generally more applicable to networking than programming, least thats how it looks in the course im curerntly studying (computer networking)

networking is very much a part of the door to info security, but remember, knowing how to program gives you a huge understanding in how the software on networks runs, id say go with both man, i am, im in college and im doing networking and next semester im taking programming=) i love college=)

I am trying to do the same thing as you are and as everyone said networking is the way I am going I just recommend if you are doing that to do some studying an get your CISSP while you are at it. From what I understand it is supposed to be easier to get than something like a MCSE. I have been studying for it and from what my mentor is telling me, in the business world it shows a company you arent some script kiddie or something trying to hack their systems. Enjoy

that reminds me, on AO i found something called a TICSA cert thing, you go to the website and you can take practice exams, i didnt know what it was but i was bored and took the practice exam, afetr i almost passed i found out what it was, youmight wanna look into the AO security certs and degrees.

id say networking. but i did a Bachelor of Science in programming, as well as getting my MSCSE and N+ cert's, so i can tell that the networking part, for me definately has more to do with security, but go with your gut man, nowadays, it doesn't really matter anymore, yeah right, altough the fields do tend to cross, if you want to get into security id suggest networking

:hippy:

If you are interested in both then, personally I would recommend programming. It’s best to get a good start off in programming at University. You can easily do networking (MCSE, CISCO ETC) courses after graduation.


Paladin

It is a very difficult choice to make, but to me, it would be more of a choice of how instantly you want to be able to do things. If you jump into the networking track, you will probably pretty much jump into the networking world; however, you may find that you are missing many fundamentals that you may have to go back to learn (if you want to truly understand what you are doing, which can also effect how far you advance in your job and how quickly). Also, alot of network security revolves around coding or making adjustments to other peoples code or understanding how other people's coding errors led to a particular vulnerability, something you may or may not find difficult without university style training in programming. Furthermore, at least in my job, I am constantly writing programs that save me alot of time that I may not have been able to do had I not took a serious amount of CS classes.

If you are patient, I would recommend going into programming first (for a solid grounding in fundamentals, not to mention, it will pay off in the long run as far as being better able to understand certain things in the security world) and then go for a CCNA or CCIP later.

If you want to go for the gravy now though, I would recommend taking 'electives' in programming so that you at least get a good grounding in it.

It really comes down to where your interests lay...

/nebulus

You might want to double-check the requirements for a CISSP certification. Several years of experience were/are necessary. The "basic" requirements for qualifying to sit for the exam will change at the first of the year (from what I remember from the web site).

IMO...Obtain a basic, entry-level cert or two that covers networking basics before you tackle the more advanced certs. Network+ and INet+ (from CompTia) are excellent entry-level certs that demonstrate you have mastery of network basics (Network+) and have an understanding of the Internet core components (INet+). Hold off on the MCSE and CCNA and others until you get your feet wet in a particular industry. Why pay for these certs when you could get your employer to? Oh yeah...CompTia will offer a Security+ cert in 2003.

I'm doing both the networking and the programming schoolwise. They both seem to complement each other and can't have either one without the other, so if u have the time/resouces, do both. I am. And I will know it will payoff in the longrun, cause I also do grad. level work studying Management Information Systems, and when talking/working with fellow classmates, I can tell that I am way ahead of them.

Thanks to everyone for their replies. Looking at them, there were several mixed responses but I did get some good things out of it.

First off, I looked into the CompTIA Security+ exam, from what I gather this will be great way to get a "foot in the door". Secondly, a lot of people said they would do both networking and programming. Considering my current circumstance, I might try to do both programming and networking then try to get into Grad school for InfoSec. I'm currently looking at JMU!
Wish me luck!