Q:

What is the state of Security in Comp Sci Programs

In a previous question (How can I keep my programmer collegues informed about security issues?) there was a statement:

"...and I realise that security topics are often barely known from both the student and the teacher."

It made me wonder what is getting taught.
So what is the state of Security-related teaching in a run of the mill CS program?  Are the basics taught?  Are more advanced topics taught? Perhaps elective?  None at all?

A:

From the universities I have looked at, the basics are there (to a greater or lesser degree) but as it isn't a focus, there is very little effort put into updating the course material, for example some course material we have seen has code examples containing well known security vulnerabilities. This just isn't going to get rectified onthe low budgets universities have. And as far as advanced topics, you'll need to be on an Infosec related course.
Initiatives such as the Scotland & Northern Ireland Centre of Excellence in Security & Cybercrime are hoping to make a difference by using volunteers from industry to improve the training in order to lead to graduates who actually understand security. 
(disclaimer - I am one of the volunteer supporters of the CoE in Scotland)
Edit - to be fair there are a couple of universities in the UK that have excellent security modules but these are normally part of infosec degrees (eg Royal Holloway, Westminster, Napier)

