- Training
- Training Live Events
- Training Without Travel
- SANS Courses
- Certified Instructors
- Career Roadmap
- Training Calendars
- SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- SANS Onsite
- SANS SelfStudy
- SANS Summit Series
- SANS Partnership Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- List of Resources
- Top 20 List
- Top 25 Programming Errors
- Top 10 Security Trends
- Top 5 Essential Log Reports
- Reading Room
- Webcasts
- WhatWorks
- Newsletters
- RSS Feeds
- Calendar Feeds
- Projects
- Security Policy Project
- Security+ Study Guide
- S.C.O.R.E.
- Awards & Recognitions
- SANS Buyers Guide
- Security Tool Demos
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
the most trusted source for computer security training, certification and research
Welcome to SANS' Information Security Reading Room
Featuring over 1750 original computer security white papers in 73 different categories.
Special Categories |
Last Updated |
| Last 25 Papers Added to the SANS InfoSec Reading Room | Dec 30, 08 |
| Top 25 Papers Based on Views | Dec 12, 08 |
| Thought Leadership Interviews (STI) | June 30, 08 |
| GIAC Honors Papers | May 01, 07 |
| SANS Industry Analysts Program | Apr 23, 08 |
| Data Loss Prevention (DLP) | Dec 7, 07 |
| Free Vendor White Papers | Fall 2008 |
| Does Certification Matter Series | Archive |
| Book Reviews | Archive |
| Special Papers | Archive |
To access the white papers, please choose a category from the list below. You must have a working PDF viewer installed to access the papers.
Don't have Adobe Acrobat Reader? Download it for free! 
Expand Your Computer Security Knowledge With:
Category |
Last Updated |
| Acceptable Use | Mar 02, 04 |
| Application/Database Sec | Jan 04, 08 |
| Attacking Attackers | Oct 31, 03 |
| Auditing & Assessment | Jun 18, 08 |
| Authentication | Oct 22, 08 |
| Backup Strategies | Oct 09, 08 |
| Best Practices | Jul 27, 07 |
| Case Studies | Sep 11, 08 |
| Commercial Software | Jan 26, 05 |
| Country-specific Issues | Sep 16, 04 |
| Covert Channels | Feb 07, 08 |
| Data Loss Prevention | Sep 05, 08 |
| Digital Certificates | Oct 31, 03 |
| Digital Privacy | Dec 03, 08 |
| Directories | Mar 15, 07 |
| Disaster Recovery | Aug 07, 08 |
| DNS Issues | Dec 30, 08 |
| eCommerce | Aug 29, 06 |
| Email Issues | Nov 20, 07 |
| Encryption & VPNs | Oct 26, 07 |
| Firewalls & Perimeter Protection | Dec 12, 08 |
| Forensics | Nov 19, 08 |
| Getting Started/InfoSec | Aug 18, 06 |
| Hackers | Dec 11, 07 |
| HIPAA | Mar 09, 05 |
| Home & Small Office | Oct 05, 05 |
| Incident Handling | Dec 16, 08 |
| Information Assurance | May 05, 05 |
| Information Warfare | Aug 24, 05 |
| Intrusion Detection | Nov 06, 08 |
| Intrusion Prevention | Oct 23, 08 |
| ISO-17799 | Jan 24, 08 |
| Legal Issues | Feb 01, 08 |
| Linux Issues | Jan 14, 08 |
| Logging Technology and Techniques | Nov 13, 08 |
| Mac/Apple Issues | Nov 10, 08 |
Category |
Last Updated |
|
| Mainframes | Jun 30, 05 | |
| Malicious Code | Nov 17, 08 | |
| Managed Services | Jun 29, 05 | |
| Management & Leadership | Aug 19, 08 | |
| Network Devices | Oct 15, 07 | |
| Novell/Netware Issues | Jan 22, 05 | |
| PDAs and Other Mobile Devices | Jun 24, 08 | |
| Penetration Testing | Nov 06, 07 | |
| Physical Security | Aug 30, 07 | |
| Protocols | Sep 27, 07 | |
| Scripting Tips | Mar 25, 04 | |
| Securing Code | Feb 01, 08 | |
| Security Awareness | May 20, 08 | |
| Security Basics | Jun 25, 08 | |
| Security Modeling | Jul 03, 08 | |
| Security Policy Issues | Jul 03, 08 | |
| Social Engineering | Oct 14, 08 | |
| Solaris Issues | May 05, 05 | |
| Standards | Aug 24, 05 | |
| Steganography | Jul 03, 08 | |
| Storage | Mar 02, 04 | |
| System Administration | Oct 01, 07 | |
| Telecommuting | Oct 31, 03 | |
| Telephone Issues | May 05, 05 | |
| Terminal Services | Feb 14, 07 | |
| Threats/Vulnerabilities | Mar 28, 08 | |
| Tools | Nov 18, 08 | |
| Travel Security | Oct 31, 03 | |
| Unix Issues | Aug 03, 07 | |
| VOIP Issues | Dec 29, 08 | |
| Web Servers | Jan 18, 07 | |
| Windows .NET | Nov 13, 08 | |
| Windows 2000 Issues | Oct 31, 03 | |
| Windows Issues | Mar 28, 08 | |
| Wireless Access | Jun 18, 08 | |
| Work Monitoring | Sep 17, 08 |
VENDORS: For information on advertisements or placing your white paper in the SANS Information Security Reading Room visit, http://www.sans.org/vendor/banners.php.
"Expand your mastery of Information Security through SANS Training - As YOU Like It!"
LIVE in GREAT CITIES!
LIVE at YOUR SITE!
LIVE ONLINE!
or ONLINE at YOUR OWN PACE!
Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.
All papers are copyrighted. No re-posting of them or distribution of them is permitted.