- Training
- Training Live Events
- Training Without Travel
- Security Courses
- Security Curricula
- Certified Instructors
- Training Calendars
- SANS vLive!
- SANS OnDemand
- Community SANS
- Cyber Guardian
- SANS Mentor Program
- Coins
- SANS Onsite
- SANS SelfStudy
- SANS Summit Series
- SANS Partnership Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- List of Resources
- Top Security Risks
- Top 25 Software Errors
- 20 Coolest Jobs
- Application Security Procurement Language
- Top 10 Security Trends
- Top 5 Essential Log Reports
- Reading Room
- Webcasts
- AudioCasts
- WhatWorks
- Newsletters
- RSS Feeds
- Calendar Feeds
- Security Thought Leaders
- Security Policy Project
- Security+ Study Guide
- SANS Buyers Guide
- Security Tool Demos
- 2008 Salary Survey
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
The most trusted source for computer security training, certification and research.
Welcome to SANS Information Security Reading Room
Featuring over 1,853 original computer security white papers in 74 different categories.
Special Categories |
Last Updated |
| Last 25 Papers Added to the SANS InfoSec Reading Room | Aug 30, 10 |
| Top 25 Papers Based on Views | Aug 27, 10 |
| SANS Industry Analysts Program | August, 2010 |
| GIAC Paper of the Quarter | April 7, 09 |
| Thought Leadership Interviews (STI) | Nov 19, 09 |
| Free Vendor White Papers | Spring 2009 |
| Free Vendor Audio Casts | Fall 2009 |
| Certification Series/Surveys, Book Reviews, Special Papers | Archive |
To access the white papers, please choose a category from the list below. You must have a working PDF viewer installed to access the papers.
Don't have Adobe Acrobat Reader? Download it for free! 
Look for this logo to easily identify free vendor content in the categories below.
Expand Your Computer Security Knowledge With:
Category |
Last Updated |
| Acceptable Use | Mar 02, 04 |
| Application/Database Sec | May 22, 09 |
| Attacking Attackers | Oct 31, 03 |
| Auditing & Assessment | Apr 27, 10 |
| Authentication | Oct 15, 09 |
| Backup Strategies | May 07, 10 |
| Best Practices | Apr 29, 10 |
| Case Studies | Dec 28, 09 |
| Commercial Software | Jan 26, 05 |
| Compliance | Jul 15, 10 |
| Country-specific Issues | Sep 16, 04 |
| Covert Channels | Feb 07, 08 |
| Data Loss Prevention | May 28, 10 |
| Digital Certificates | Oct 31, 03 |
| Digital Privacy | Mar 18, 10 |
| Directories | Mar 15, 07 |
| Disaster Recovery | May 28, 10 |
| DNS Issues | Dec 30, 08 |
| eCommerce | Sep 29, 09 |
| Email Issues | Jan 12, 09 |
| Encryption & VPNs | Sep 29, 09 |
| Firewalls & Perimeter Protection | Jul 30, 10 |
| Forensics | Feb 18, 10 |
| Getting Started/InfoSec | Dec 07, 09 |
| Hackers | Dec 11, 07 |
| HIPAA | Mar 09, 05 |
| Home & Small Office | Oct 05, 05 |
| Incident Handling | May 07, 10 |
| Information Assurance | May 05, 05 |
| Information Warfare | Apr 29, 10 |
| Intrusion Detection | Aug 19, 10 |
| Intrusion Prevention | Dec 28, 09 |
| ISO-17799 | Jan 24, 08 |
| Legal Issues | Apr 29, 10 |
| Linux Issues | Jan 14, 08 |
| Logging Technology and Techniques | Aug 25, 10 |
| Mac/Apple Issues | Jan 09, 09 |
Category |
Last Updated |
|
| Mainframes | Jun 30, 05 | |
| Malicious Code | Aug 30, 10 | |
| Managed Services | Apr 27, 10 | |
| Management & Leadership | May 07, 10 | |
| Network Devices | Aug 25, 10 | |
| Novell/Netware Issues | Jan 22, 05 | |
| PDAs and Other Mobile Devices | Jun 24, 08 | |
| Penetration Testing | Jun 03, 10 | |
| Physical Security | Aug 30, 07 | |
| Protocols | Sep 27, 07 | |
| Scripting Tips | Jan 28, 10 | |
| Securing Code | Mar 18, 10 | |
| Security Awareness | Mar 18, 10 | |
| Security Basics | Jul 06, 10 | |
| Security Modeling | Jul 03, 08 | |
| Security Policy Issues | Mar 18, 10 | |
| Social Engineering | Mar 18, 10 | |
| Solaris Issues | May 05, 05 | |
| Standards | Aug 24, 05 | |
| Steganography | Jul 03, 08 | |
| Storage | Mar 02, 04 | |
| System Administration | Dec 15, 09 | |
| Telecommuting | Oct 31, 03 | |
| Telephone Issues | May 05, 05 | |
| Terminal Services | Feb 14, 07 | |
| Threats/Vulnerabilities | Mar 28, 08 | |
| Tools | Jan 28, 10 | |
| Travel Security | Oct 31, 03 | |
| Unix Issues | Aug 03, 07 | |
| VOIP Issues | Dec 29, 08 | |
| Web Servers | Jan 18, 07 | |
| Windows .NET | Nov 13, 08 | |
| Windows 2000 Issues | Oct 31, 03 | |
| Windows Issues | Jun 11, 10 | |
| Wireless Access | May 04, 09 | |
| Work Monitoring | Sep 17, 08 |
VENDORS: For information on advertisements or placing your white paper in the SANS Information Security Reading Room visit, http://www.sans.org/vendor/banners.php.
"Expand your mastery of Information Security through SANS Training - As YOU Like It!"
LIVE in GREAT CITIES!
LIVE at YOUR SITE!
LIVE ONLINE!
or ONLINE at YOUR OWN PACE!
Submit your paper to the GIAC White Paper of the Quarter Program
Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.
All papers are copyrighted. No re-posting of them or distribution of them is permitted.
- © 2000-2010 The SANS™ Institute
- Web Privacy Policy | Web Contact | Link to Us |
- Press Room | Trademark Usage Policy