10 Undergraduate Security Degree Programs to Explore
Colleges and universities are ramping up cybersecurity education with a wider range of degree programs and more resources for students to build their infosec careers.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt9756f85d2264cf3e/64f0d3a4c0315d61eca31ee7/SSEducationintro.jpg?width=700&auto=webp&quality=80&disable=upscale)
The rising demand for cybersecurity professionals is fueling the development of undergraduate security degree programs at colleges and universities across the country. Many programs are thinking beyond traditional courses to offer more resources and tools for aspiring security pros.
"Enrollment numbers have increased, and there's been a lot of publicity about cybersecurity issues and a lot of publicity related to how [the job market is] underserved," says Anthony Pinto, cybersecurity program coordinator for the University of West Florida computer science department. "There's a shortage now. There's been one for a long period of time."
As more schools create cybersecurity courses, many are learning how broad and complex the field is. Educating a cybersecurity pro isn't limited to teaching penetration testing or malware analysis, Pinto explains. There also are practitioners and specialists out there who focus on network security, information assurance, system administration, incident response, and digital forensics.
"It's constant evolution and a constant change of curriculum," says Kevin Nolten, director of academic outreach for Cyber.org, a nonprofit for cybersecurity workforce development.
Some schools have begun to branch out from the classroom to offer laboratories, competitions, and mentorship programs to security students, notes Chris Brook, program manager at Digital Guardian and editor at Data Insider, who has done extensive research into degree programs.
"Looking at all of these listings, something that also caught my eye were when universities highlighted centers and laboratories that students could use for extracurricular learning," he says. The NYU Tandon School of Engineering, for one, has the Offensive Security, Incident Response, and Internet Security (OSIRIS) laboratory and runs club meetings, hack nights, and capture-the-flag competitions.
With so many options available, how does one choose an undergraduate degree program?
Being government-certified is a plus. For example, the National Security Agency and Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) sponsor the National Centers for Academic Excellence in Cyber Defense (CAE-CD) program, which has more than 330 participating schools in the US and aims to create standards for security education, professional development, and leadership.
You'll also want the school to be accredited, learn instructors' qualifications, and if you'd like to earn certifications, find those that help prepare for the CISSP, CISM, CRISC, CEH, and other certifications.
Here, we take a closer look at schools thinking outside the box when it comes to undergraduate cybersecurity degree programs. Did we miss any? Feel free to add more in the comments sections, below.
The University of West Florida (UWF), based in Pensacola, offers a Bachelor of Science in Cybersecurity and meets the NSA and DHS criteria for CAE-CD.
Undergrad students take a range of security courses, including Database Security, Secure Software Development, Ethical Hacking, and Computer and Network Security. "How do you secure a network, how do you configure a firewall, how do you set up intrusion detection systems, things like that," Pinto explains. A Malware Analysis course goes beyond teaching types of malware and aims to instruct students in how to deconstruct and decompile malicious code.
As a foundation, students are also required to learn the basics of how computers work through classes like Intermediate Programming, Operating Systems, and Database Systems; they also must complete a number of electives. Pinto points to courses such as Cyber and Law and Cyber Terrorism as examples of nontechnical courses related to their core field.
In a culminating course called Cyber War Gaming, students are assigned a red team or blue team in an exercise to attack and defend against each other.
The UWF Center for Cybersecurity offers education to both university students and external partners around cybersecurity topics. Its Florida Cyber Range, a platform offering training and testing for academic, military, government, and industry use, aims to improve security training and operations throughout the state.
Businesses have used the Cyber Range for security training; Florida state government workers were trained in system security there, says Pinto. Florida's Voter Registration used it for education in better securing their systems. More universities are offering centers like this, which break outside academia to help educate the local community on cybersecurity.
UMGC, based in Largo, Md., has more than a dozen different cybersecurity degrees and certificates students can earn. The school's range of offerings "is helpful if someone was trying to decide if they want to be a sysadmin or a CISO," says Digital Guardian's Brook. It also meets CAE-CD criteria.
The school's undergraduate programs include a Bachelor of Science in Computer Networks and Cybersecurity; Bachelor of Science in Cybersecurity Management and Policy; and a Bachelor of Science in Software Development and Security. It also offers master's degree programs in cloud computing architecture, cyber operations, management and policy, and digital forensics.
Each undergrad degree program offers coursework and certifications aligned with specific parts of the industry. Students in computer networks and cybersecurity, for example, will learn how to configure and maintain hardware parts and operating systems, as well as how to design and write a penetration testing proposal. Their classes will help prepare them for certs like the CompTIA Security+ and Certified Ethical Hacker (CEH).
A path in cybersecurity management and policy will focus more on teaching students how to use security best practices and risk management to protect information and assets. They'll learn how to evaluate technology with respect to security goals and investigate security incidents.
UMGC acknowledges bachelor's degree students may be at different points in their careers. Its BS in computer networks and cybersecurity is designed for those new to the field or seeking a middle management role, while the BS in cybersecurity management and policy is more geared toward students hoping to leverage their work experience to move into a supervisor role.
Metropolitan State University (MSU)'s Bachelor of Science in Cybersecurity, designated as CAE-CD by the DHS and NSA, has had strong enrollment numbers since it launched in spring 2019, says Faisal Kaleem, professor in the MSU department of computer science and cybersecurity.
When he designed the undergraduate course, Kaleem brought in courses such as Vulnerability Assessment and Penetration Testing, Cryptography for Security Practitioners, and Networking Protocols and Analysis, in addition to core computer technology classes and electives focused on malware analysis, computer laws, and cyber incident response.
As their final project, students may complete either a capstone or "cyber residency," an internship that will give them a deeper understanding of a specific part of the field, he says.
"They are getting all the practical skills under supervision of an organization," Kaleem explains, noting many students have converted their internship into a full-time role. "That is, to me, the highlight of the program."
The ability to integrate students into the workforce following graduation is key to an effective cybersecurity program, CISA says, noting students entering the workforce should have the appropriate knowledge, skills, and abilities to do their jobs. MSU's cyber residency program is an example of how a college or university can help security students make the transition.
Kaleem also leads MN Cyber, a public-private initiative designed to provide security education to students and business professionals. Its Cyber Academy is geared toward those starting and advancing security careers. Its Cyber Range is a more advanced platform to boost performance, and Cyber Pathways is designed to build security education from K-12 to career. An advisory board of CISOs from dozens of major firms, such as Best Buy and Medtronic, aid with running MN Cyber and placing students into permanent roles.
When asked about strong cybersecurity degree programs, both UWF's Pinto and Cyber.org's Nolten, point to Dakota State University (DSU). Its Bachelor of Science in Cyber Operations is designated CAE-CD by the NSA and DHS.
The program is designed to teach students how to discover and investigate cyberattacks and software vulnerabilities, as well as analyze attackers' motivations and techniques. In addition to foundational courses like Web Application Programming and Networking, they learn reverse engineering, defensive and offensive network security, and malware analysis, among other security-focused skills.
"What we're seeing from a standpoint of the education space is more and more schools are focusing on and establishing a connection around, cyber," says Nolten. While "cyber" is a broad term spanning several topics, from computer science to cyber engineering, "security plays a role in each and every one of those components."
In DSU's "hacking lab," students can learn how attackers think, the tools they use, and how software vulnerabilities are discovered and exploited. Most courses include hands-on experience in programming, networking, and cybersecurity, the school states. In labs, students can exploit commercial software applications or break apart malware to learn how it works.
Outside the classroom, DSU students can build their skills in ACM programming contests or prove them in the National Cyber League (NCL) and Collegiate Cyber Defense Competition (CCDC). Faculty involvement in student development, including competitions and other extracurricular activities, can help an undergraduate program stand out, one CISA official says.
UTSA, which offers a Bachelor of Business Administration in Cyber Security, is designated a CAE in all three areas recognized by NSA and DHS: cyber defense, cyber operations, and research.
The BBA in Cyber Security, which falls under the UTSA College of Business, requires a mix of both business and cybersecurity courses for students to graduate. In addition to security classes such as Operating System Security, Information Assurance and Security, and Intrusion Detection, students must also take classes such as Management Strategy, Principles of Business Finance, and Business Communications and Professional Development.
Chris Veltsos, computer science professor at Minnesota State University, Mankato, emphasizes the importance of including professional skills development into a cybersecurity curriculum. Writing and communications classes teach security pros how to "talk the tech talk" to business leaders. The business courses included in this degree can prove helpful to IT security pros.
"It's really challenging, but I also see the field continuing to evolve," he says of security education. "Part of that is, do students today still need that deep skillset of the computer science roots of the information security space in order to be successful?" While many infosec professionals will need deep technical skills, Veltsos says, many in the future may not.
UTSA is a featured school by the NSA, the agency recently reported. Students have participated in several NSA programs, such as summer internship and educational programs, in the past five years. The two also collaborate on technology research as part of a five-year agreement signed in 2017.
Drexel's online Bachelor of Science in Computing and Security Technology is focused on educating professionals in business, government, and nonprofit roles in computer systems administration and cybersecurity. The school meets CAE-CD criteria.
Unlike undergraduate programs tailored toward students new to the job market, Drexel's curriculum is designed for professionals who already work in IT but are looking for a career change or personal development. It's also ideal for working adults who have an associate's degree or finished two years of higher education, the university explains on its website.
Classes aim to focus on real-world challenges in cybersecurity. Some courses focus on securing IoT devices, such as Computer Forensics, in which students learn to analyze programmable logic controllers. Others, such as Virtual Environments and Cloud Security, focus on securing cloud technologies. Through the Drexel Co-op, a cooperative education program, students can gain real-work job experience in the field before graduating.
Another perk for working professionals is the option to accelerate their studies. Drexel's program is organized into four 10-week quarters per year, as opposed to the usual two-semester system, so students can take more classes in a shorter time period. They may also transfer up to 113 quarter credits from an accredited institution with a grade C or better.
Students who have completed IT certifications such as the A+, Oracle 9i DBA, Windows 2008+, CCNA, and others may be eligible to earn more credit toward their bachelor's degrees. Some courses will also help students prepare to earn additional certifications.
Regis University (CAE-CD), similar to other programs for working professionals, offers online courses taught in eight-week terms, with programs starts offered throughout the calendar year.
Its Bachelor of Science in Cybersecurity requires foundational courses focused on communications, database management, IT system components, network forensics, database management security, and policy, ethics, and compliance, in addition to upper-division courses in systems administration and ethical leadership.
Cybersecurity skills have grown essential across all industries. For those who want to combine their security expertise with another discipline, Regis' dual master's degree program enables students to build on a BS in Cybersecurity with a Master of Science in Data Science, Enterprise Systems Engineering, Health Informatics, Information and Cyber Security, Information Technology Management, or Software Engineering.
Old Dominion University (CAE-CD) offers a Bachelor of Science in Cybersecurity and Bachelor of Science in Cyber Operations. Each degree prepares students for different careers in cyberspace.
The Bachelor of Science in Cybersecurity is designed to help students build skills they need to protect computer systems, networks, and data from attack. An interdisciplinary curriculum brings together courses in computer science, computer engineering, information technology, information assurance, psychology, and philosophy. Students learn in the classroom, as well as in computer lab sessions and research projects.
The Bachelor of Science in Cyber Operations is designed to balance technical courses with nontechnical instruction in the ethical, legal, and human-centered aspects of cyberspace. Classes balance theory, practice, and hands-on labs to teach students about system attacks, infiltration, exploitation, defense, mitigation, and recovery.
For students who want to become more involved in research, ODU's Center for Cybersecurity Education and Research (CCSER) aims to develop cross-disciplinary research projects that focus on cybersecurity and provide security expertise to the school and surrounding region.
Purdue University Global (CD-CAE) offers a Bachelor of Science in Cybersecurity that instructs students in policy, programming, and management, with the option to complete an internship in lieu of a capstone at the end of the program.
In addition to core classes in science, mathematics, and others, cybersecurity students must take classes in technical subjects such as Python programming, Linux Security, Network Security, Ethical Hacking, and Information Systems Security. Outside the technical subjects, they must study cybersecurity policies, ethics in cybersecurity, and the basics of management.
For those seeking a more advanced degree, earning a minimum course degree in certain bachelor's degree classes can gain students entry into a shortened version of Purdue Global's Master of Science in Information Technology or Cybersecurity Management.
Regent University (CAE-CD), a private Christian university located in Virginia Beach, Va., offers two undergraduate cybersecurity degree programs: a Bachelor of Science in Cybersecurity and a Bachelor of Science in Cyber & Digital Forensics.
The BS in Cybersecurity aims to teach students how to analyze cybersecurity threats and trends, and prepare to defend organizations from cyberattacks, through courses ranging from systems security, to Internet security, to information security management, to disaster recovery.
Regent's BS in Cyber & Digital Forensics is geared toward students who want to analyze and mitigate security incidents. They learn to analyze digital forensics principles, detect and reconstruct infections, and advise solutions to organizations' problems. Their classes include criminal investigation, operating system forensics, malware forensics, and mobile forensics, in addition to classes on system security.
Regent University (CAE-CD), a private Christian university located in Virginia Beach, Va., offers two undergraduate cybersecurity degree programs: a Bachelor of Science in Cybersecurity and a Bachelor of Science in Cyber & Digital Forensics.
The BS in Cybersecurity aims to teach students how to analyze cybersecurity threats and trends, and prepare to defend organizations from cyberattacks, through courses ranging from systems security, to Internet security, to information security management, to disaster recovery.
Regent's BS in Cyber & Digital Forensics is geared toward students who want to analyze and mitigate security incidents. They learn to analyze digital forensics principles, detect and reconstruct infections, and advise solutions to organizations' problems. Their classes include criminal investigation, operating system forensics, malware forensics, and mobile forensics, in addition to classes on system security.
The rising demand for cybersecurity professionals is fueling the development of undergraduate security degree programs at colleges and universities across the country. Many programs are thinking beyond traditional courses to offer more resources and tools for aspiring security pros.
"Enrollment numbers have increased, and there's been a lot of publicity about cybersecurity issues and a lot of publicity related to how [the job market is] underserved," says Anthony Pinto, cybersecurity program coordinator for the University of West Florida computer science department. "There's a shortage now. There's been one for a long period of time."
As more schools create cybersecurity courses, many are learning how broad and complex the field is. Educating a cybersecurity pro isn't limited to teaching penetration testing or malware analysis, Pinto explains. There also are practitioners and specialists out there who focus on network security, information assurance, system administration, incident response, and digital forensics.
"It's constant evolution and a constant change of curriculum," says Kevin Nolten, director of academic outreach for Cyber.org, a nonprofit for cybersecurity workforce development.
Some schools have begun to branch out from the classroom to offer laboratories, competitions, and mentorship programs to security students, notes Chris Brook, program manager at Digital Guardian and editor at Data Insider, who has done extensive research into degree programs.
"Looking at all of these listings, something that also caught my eye were when universities highlighted centers and laboratories that students could use for extracurricular learning," he says. The NYU Tandon School of Engineering, for one, has the Offensive Security, Incident Response, and Internet Security (OSIRIS) laboratory and runs club meetings, hack nights, and capture-the-flag competitions.
With so many options available, how does one choose an undergraduate degree program?
Being government-certified is a plus. For example, the National Security Agency and Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) sponsor the National Centers for Academic Excellence in Cyber Defense (CAE-CD) program, which has more than 330 participating schools in the US and aims to create standards for security education, professional development, and leadership.
You'll also want the school to be accredited, learn instructors' qualifications, and if you'd like to earn certifications, find those that help prepare for the CISSP, CISM, CRISC, CEH, and other certifications.
Here, we take a closer look at schools thinking outside the box when it comes to undergraduate cybersecurity degree programs. Did we miss any? Feel free to add more in the comments sections, below.
About the Author(s)
You May Also Like
CISO Perspectives: How to make AI an Accelerator, Not a Blocker
August 20, 2024Securing Your Cloud Assets
August 27, 2024