- Training
- Training Live Events
- Training Without Travel
- SANS Courses
- SANS Curricula
- Certified Instructors
- Training Calendars
- SANS vLive! / SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- Coins
- SANS Onsite
- SANS SelfStudy
- SANS Summit Series
- SANS Partnership Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- List of Resources
- Top 20 List
- Top 25 Programming Errors
- 20 Coolest Jobs
- Application Security Procurement Language
- Top 10 Security Trends
- Top 5 Essential Log Reports
- Reading Room
- Webcasts
- WhatWorks
- Newsletters
- RSS Feeds
- Calendar Feeds
- Security Thought Leaders
- Security Policy Project
- Security+ Study Guide
- SANS Buyers Guide
- Security Tool Demos
- 2008 Salary Survey
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
the most trusted source for computer security training, certification and research
Welcome to SANS' Information Security Reading Room
Featuring over 1786 original computer security white papers in 73 different categories.
Special Categories |
Last Updated |
| Last 25 Papers Added to the SANS InfoSec Reading Room | Jun 25, 09 |
| 2008 Salary & Certification Survey | Feb 05, 09 |
| Top 25 Papers Based on Views | Jul 03, 09 |
| GIAC Paper of the Quarter | April 7, 09 |
| Thought Leadership Interviews (STI) | June 30, 08 |
| Working Papers in Application Security | March 1, 09 |
| GIAC Honors Papers | May 01, 07 |
| SANS Industry Analysts Program | Feb 4, 09 |
| Data Loss Prevention (DLP) | Dec 7, 07 |
| Free Vendor White Papers | Spring 2009 |
| Does Certification Matter Series | Archive |
| Book Reviews | Archive |
| Special Papers | Archive |
To access the white papers, please choose a category from the list below. You must have a working PDF viewer installed to access the papers.
Don't have Adobe Acrobat Reader? Download it for free! 
Expand Your Computer Security Knowledge With:
Category |
Last Updated |
| Acceptable Use | Mar 02, 04 |
| Application/Database Sec | May 22, 09 |
| Attacking Attackers | Oct 31, 03 |
| Auditing & Assessment | May 04, 09 |
| Authentication | May 01, 09 |
| Backup Strategies | Oct 09, 08 |
| Best Practices | Jul 27, 07 |
| Case Studies | Jun 25, 09 |
| Commercial Software | Jan 26, 05 |
| Country-specific Issues | Sep 16, 04 |
| Covert Channels | Feb 07, 08 |
| Data Loss Prevention | Feb 11, 09 |
| Digital Certificates | Oct 31, 03 |
| Digital Privacy | Dec 03, 08 |
| Directories | Mar 15, 07 |
| Disaster Recovery | Aug 07, 08 |
| DNS Issues | Dec 30, 08 |
| eCommerce | Aug 29, 06 |
| Email Issues | Jan 12, 09 |
| Encryption & VPNs | Oct 26, 07 |
| Firewalls & Perimeter Protection | Apr 23, 09 |
| Forensics | Mar 26, 09 |
| Getting Started/InfoSec | Aug 18, 06 |
| Hackers | Dec 11, 07 |
| HIPAA | Mar 09, 05 |
| Home & Small Office | Jun 22, 09 |
| Incident Handling | Jun 18, 09 |
| Information Assurance | May 05, 05 |
| Information Warfare | Aug 24, 05 |
| Intrusion Detection | May 04, 09 |
| Intrusion Prevention | Oct 23, 08 |
| ISO-17799 | Jan 24, 08 |
| Legal Issues | Apr 23, 09 |
| Linux Issues | Jan 14, 08 |
| Logging Technology and Techniques | Nov 13, 08 |
| Mac/Apple Issues | Jan 09, 09 |
Category |
Last Updated |
|
| Mainframes | Jun 30, 05 | |
| Malicious Code | Jun 25, 09 | |
| Managed Services | Jun 29, 05 | |
| Management & Leadership | Jun 09, 09 | |
| Network Devices | Apr 27, 09 | |
| Novell/Netware Issues | Jan 22, 05 | |
| PDAs and Other Mobile Devices | Jun 24, 08 | |
| Penetration Testing | Jun 22, 09 | |
| Physical Security | Aug 30, 07 | |
| Protocols | Sep 27, 07 | |
| Scripting Tips | Mar 25, 04 | |
| Securing Code | Feb 01, 08 | |
| Security Awareness | Mar 24, 09 | |
| Security Basics | Jun 25, 08 | |
| Security Modeling | Jul 03, 08 | |
| Security Policy Issues | Jul 03, 08 | |
| Social Engineering | Oct 14, 08 | |
| Solaris Issues | May 05, 05 | |
| Standards | Aug 24, 05 | |
| Steganography | Jul 03, 08 | |
| Storage | Mar 02, 04 | |
| System Administration | Oct 01, 07 | |
| Telecommuting | Oct 31, 03 | |
| Telephone Issues | May 05, 05 | |
| Terminal Services | Feb 14, 07 | |
| Threats/Vulnerabilities | Mar 28, 08 | |
| Tools | Jun 18, 09 | |
| Travel Security | Oct 31, 03 | |
| Unix Issues | Aug 03, 07 | |
| VOIP Issues | Dec 29, 08 | |
| Web Servers | Jan 18, 07 | |
| Windows .NET | Nov 13, 08 | |
| Windows 2000 Issues | Oct 31, 03 | |
| Windows Issues | Mar 28, 08 | |
| Wireless Access | May 04, 09 | |
| Work Monitoring | Sep 17, 08 |
VENDORS: For information on advertisements or placing your white paper in the SANS Information Security Reading Room visit, http://www.sans.org/vendor/banners.php.
"Expand your mastery of Information Security through SANS Training - As YOU Like It!"
LIVE in GREAT CITIES!
LIVE at YOUR SITE!
LIVE ONLINE!
or ONLINE at YOUR OWN PACE!
Submit your paper to the GIAC White Paper of the Quarter Program
Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.
All papers are copyrighted. No re-posting of them or distribution of them is permitted.
- © 2000-2009 The SANS™ Institute
- Web Privacy Policy | Web Contact |
- Press Room | Trademark Usage Policy