Alright, I've been looking into this field for a few months now I really want to get started with it. Problem is, I have no idea which field to study. I've heard of people getting into forensics with computer science degrees, computer internetworking technologies degrees, and computer information systems degrees. No matter where I look I can't seem to get a conclusive answer.
Is there an option "best suited" to getting into computer forensics or am I just asking the wrong questions?
Edit Really should have included my situation with this. I'll have 27 credit hours at the end of this semester, 30 with a summer course. I've taken some basic CIS classes, but I don't know if I'm even on the right track. I want to transfer to a college in Illinois (ISU, UIC, and the like)
My short answer is get your degree in computer science.
Internetworking is still viewed by many as vocational in nature (and often Cisco-centric). The knowledge is critical for intrusion investigations, but you still need the computer science base first.
Information Systems is an excellent study of broad technical issues, but it lacks some of the depth of a computer science degree. IS is an excellent choice for individuals interested in the operations and management side of the business.
Computer Science digs a little deeper than the other two and provides the best foundation for study in all areas of computer technology. It will additionally provide a slightly more logical approach to the scientific application of knowledge - a critical skill required in all forensic fields.
Outside of that, you must develope a passion for understanding the truth behind any given event. Forensic science is about truth, not assumptions and theories. Practice this investigative skill in all walks of life - understand the symtoms of your car troubles, health issues, current events, etc. Experience often trumps formal education! And always confirm what you learn from others, independently.
Having said all of that - My degree is in Finance - so re-read the previous sentence.
I don't know about the US but in the UK there are specific Computer Forensic degree courses. If that is definately the field you wish to get into then surely that would be the most logical option.
There are definitely schools here in the US that offer a degree focused on computer foreniscs.
Example Utica College offers a degree in cybercrime law & investigations with a concentration in computer forensics
There are many schools that offer these degrees and most can also be completed online.
Thank you very much, uzdcar, that was very informative. THAT was the type of answer I've been looking for these past few weeks. No touchy-feely, beating around the bush junk, I can't stand that.
Crutey, there certainly are schools that do, but it would be a hassle to get into one. Still an option, but not my preference.
Pronie, I tend to shy away from degrees that are done completely online. A because I doubt their validity and B because I couldn't balance all that school work in an online setting. Two classes are the maximum that I can do online, and that's pushing it.
The main problem I've been having is that, quite simply, people I've spoken to don't know what they're talking about; but they think that they do. I ran into the same problem with my old major (CG Animation), everyone thought that because a place that plastered "video game school" all over the place made it a valid school. Note to anyone who is or knows someone looking into the video game industry, automatically assume that they don't know what they're talking about unless they prove it beyond a shadow of a doubt.
Thank you to everyone that responded.
My recommendation would also be to get your undergrad degree in Comp. Sci., and then focus on getting an Internship and/or certification/training related to computer forensics.
Comp. Sci will give you a very strong foundation in computer concepts, specific OS theory & programming/software development. Those will be very helpful for truly understanding the bits and bytes of systems and how data is organized on a computer (in a file, on a filesystem, in a DB, in memory, etc.). All of that is useful when you need to reverse engineer a specific file format or operating system artifact. What it won't (typically) give you is in-depth knowledge in the networking components & InfoSec aspects related to computers (network theory, legal compliance, malware analysis, etc.), but I'd argue that it's easier to pick up more of that on your own than it is to pick up something like the software development lifecycle or understanding the difference between the stack and heap. However, for your degree, I would simply recommend focusing your electives around computer networking and information security to fill in that gap as best you can.
An internship and a 1 or 2-week training course dedicated to computer forensics, on top of your Comp. Sci degree, along with a vendor-neutral forensics cert like the CCE, GCFA or CHFI will put you in a very good position to slide right into any computer forensics position.
My $0.02.
Jeff