- Training
- Training Live Events
- Training Without Travel
- Security Courses
- Security Curricula
- Certified Instructors
- Training Calendars
- SANS vLive!
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- Coins
- SANS Onsite
- SANS SelfStudy
- SANS Summit Series
- SANS Partnership Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- List of Resources
- Top Security Risks
- Top 25 Programming Errors
- 20 Coolest Jobs
- Application Security Procurement Language
- Top 10 Security Trends
- Top 5 Essential Log Reports
- Reading Room
- Webcasts
- AudioCasts
- WhatWorks
- Newsletters
- RSS Feeds
- Calendar Feeds
- Security Thought Leaders
- Security Policy Project
- Security+ Study Guide
- SANS Buyers Guide
- Security Tool Demos
- 2008 Salary Survey
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
The most trusted source for computer security training, certification and research.
Welcome to SANS Information Security Reading Room
Featuring over 1,828 original computer security white papers in 74 different categories.
Special Categories |
Last Updated |
| Last 25 Papers Added to the SANS InfoSec Reading Room | Mar 09, 10 |
| 2008 Salary & Certification Survey | Feb 05, 09 |
| Top 25 Papers Based on Views | Jan 08, 10 |
| GIAC Paper of the Quarter | April 7, 09 |
| Thought Leadership Interviews (STI) | Nov 19, 09 |
| Working Papers in Application Security | March 1, 09 |
| SANS Industry Analysts Program | Jan 19, 10 |
| Free Vendor White Papers | Spring 2009 |
| Free Vendor Audio Casts | Fall 2009 |
| Does Certification Matter Series | Archive |
| Book Reviews | Archive |
| Special Papers | Archive |
To access the white papers, please choose a category from the list below. You must have a working PDF viewer installed to access the papers.
Don't have Adobe Acrobat Reader? Download it for free! 
Look for this logo to easily identify free vendor content in the categories below.
Expand Your Computer Security Knowledge With:
Category |
Last Updated |
| Acceptable Use | Mar 02, 04 |
| Application/Database Sec | May 22, 09 |
| Attacking Attackers | Oct 31, 03 |
| Auditing & Assessment | Mar 08, 10 |
| Authentication | Oct 15, 09 |
| Backup Strategies | Oct 09, 08 |
| Best Practices | Mar 08, 10 |
| Case Studies | Dec 28, 09 |
| Commercial Software | Jan 26, 05 |
| Compliance | Mar 04, 10 |
| Country-specific Issues | Sep 16, 04 |
| Covert Channels | Feb 07, 08 |
| Data Loss Prevention | Feb 11, 09 |
| Digital Certificates | Oct 31, 03 |
| Digital Privacy | Dec 03, 08 |
| Directories | Mar 15, 07 |
| Disaster Recovery | Aug 07, 08 |
| DNS Issues | Dec 30, 08 |
| eCommerce | Sep 29, 09 |
| Email Issues | Jan 12, 09 |
| Encryption & VPNs | Sep 29, 09 |
| Firewalls & Perimeter Protection | Dec 17, 09 |
| Forensics | Feb 18, 10 |
| Getting Started/InfoSec | Dec 07, 09 |
| Hackers | Dec 11, 07 |
| HIPAA | Mar 09, 05 |
| Home & Small Office | Oct 05, 05 |
| Incident Handling | Mar 01, 10 |
| Information Assurance | May 05, 05 |
| Information Warfare | Aug 24, 05 |
| Intrusion Detection | Feb 18, 10 |
| Intrusion Prevention | Dec 28, 09 |
| ISO-17799 | Jan 24, 08 |
| Legal Issues | Mar 08, 10 |
| Linux Issues | Jan 14, 08 |
| Logging Technology and Techniques | Feb 18, 10 |
| Mac/Apple Issues | Jan 09, 09 |
Category |
Last Updated |
|
| Mainframes | Jun 30, 05 | |
| Malicious Code | Mar 02, 10 | |
| Managed Services | Jun 29, 05 | |
| Management & Leadership | Jan 28, 10 | |
| Network Devices | Nov 11, 09 | |
| Novell/Netware Issues | Jan 22, 05 | |
| PDAs and Other Mobile Devices | Jun 24, 08 | |
| Penetration Testing | Mar 09, 10 | |
| Physical Security | Aug 30, 07 | |
| Protocols | Sep 27, 07 | |
| Scripting Tips | Jan 28, 10 | |
| Securing Code | Feb 01, 08 | |
| Security Awareness | Oct 08, 09 | |
| Security Basics | Jun 25, 08 | |
| Security Modeling | Jul 03, 08 | |
| Security Policy Issues | Sep 27, 07 | |
| Social Engineering | Oct 14, 08 | |
| Solaris Issues | May 05, 05 | |
| Standards | Aug 24, 05 | |
| Steganography | Jul 03, 08 | |
| Storage | Mar 02, 04 | |
| System Administration | Dec 15, 09 | |
| Telecommuting | Oct 31, 03 | |
| Telephone Issues | May 05, 05 | |
| Terminal Services | Feb 14, 07 | |
| Threats/Vulnerabilities | Mar 28, 08 | |
| Tools | Jan 28, 10 | |
| Travel Security | Oct 31, 03 | |
| Unix Issues | Aug 03, 07 | |
| VOIP Issues | Dec 29, 08 | |
| Web Servers | Jan 18, 07 | |
| Windows .NET | Nov 13, 08 | |
| Windows 2000 Issues | Oct 31, 03 | |
| Windows Issues | Dec 15, 09 | |
| Wireless Access | May 04, 09 | |
| Work Monitoring | Sep 17, 08 |
VENDORS: For information on advertisements or placing your white paper in the SANS Information Security Reading Room visit, http://www.sans.org/vendor/banners.php.
"Expand your mastery of Information Security through SANS Training - As YOU Like It!"
LIVE in GREAT CITIES!
LIVE at YOUR SITE!
LIVE ONLINE!
or ONLINE at YOUR OWN PACE!
Submit your paper to the GIAC White Paper of the Quarter Program
Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.
All papers are copyrighted. No re-posting of them or distribution of them is permitted.
- © 2000-2010 The SANS™ Institute
- Web Privacy Policy | Web Contact | Link to Us |
- Press Room | Trademark Usage Policy