Do you think that malware deserves its own section? Or might it be simply a related field? I have yet to hear of a computer security course that does (real) forensics or encourages creativity to better understand the criminal mind.
This brings up an interesting question: assuming that these things can't be taught in four years and that they matter, should we expect that a degree in CS should require more time?