While the list of schools I provided earlier represents the programs that offer Master's degrees specifically in information security, your options are much broader if you go for a doctorate. That would add any of the top 30 computer science programs as ranked by U.S. News & World Report.
If you can afford to go for a doctorate, by all means do so; it remains a much more valuable credential than the Master's. (But, of course a doctorate involves considerable time, effort and expense to obtain -- six years is typical for a doctorate as opposed to two to three years for a Master's degree.)
For more info on this topic, visit these SearchSecurity.com resources:
This was first published in July 2003