The most trusted source for computer security training, certification and research.



About SANS Industry Analysts Program

SANS Industry Analysts perform research to identify trends in the IT, IT Security, Operations and IT Audit markets, with access to resources unparalleled anywhere else: The Internet Storm Center for latest in threat information; the GIAC Advisory board of more than 2000 experts with scores of 90 or above on certification exams; and the MGT 512 Alumni on issues and concerns that impact management. If you are interested in learning more, please contact vendor@sans.org.

Featuring 31 Papers as of November 5th, 2009
Making Database Security an IT Security Priority
by Tanya Baccam
Sponsored by: Oracle
- click here PDF
Webcast - Making Database Security an IT Security Priority Webcast Sponsored by Oracle
Securing a Smarter Grid: Risk Management in Power Utility Networks
by Matthew E. Luallen
Sponsored by: NitroSecurity
- click here PDF
Application Whitelisting: Enhancing Host Security
by Dave Shackleford
Sponsored by: McAfee
- click here PDF
Webcast - Application Whitelisting Webcast Sponsored by McAfee
IT Audit for the Virtual Environment
by J. Michael Butler and Rob Vandenbrink
Sponsored by: VMWare
- click here PDF
Webcast - IT Audit for the Virtual Environment Webcast
Top Virtualization Security Mistakes (and How to Avoid Them)
by Jim D. Hietala
Sponsored by: Catbird and McAfee
- click here PDF
Recorded Webcast - Catbird and McAfee Virtualization Webcast
Data Protection Requirements
by Barbara Filkins
Sponsored by: McAfee
- click here PDF
Data Protection Requirements Checklist
by Barbara Filkins
Sponsored by: McAfee
- click here PDF
SANS Review: McAfee's Total Protection for Data
by Dave Shackleford
Sponsored by: McAfee
- click here PDF
SANS Annual 2009 Log Management Survey
by Jerry Shenk
Sponsored by: ArcSight, Intellitactics, and Loglogic
- click here PDF
Benchmarking Security Information Event Management (SIEM)
by J. Michael Butler
Sponsored by: NitroSecurity
- click here PDF
ArcSight Logger Review
by Jerry Shenk
Sponsored by: ArcSight
- click here PDF
Spanish Translation: Español - click here PDF
Real-Time Adaptive Security
by Dave Shackleford
Sponsored by: Sourcefire
- click here PDF
Log Management in the Cloud: A Comparison of In-House versus Cloud-Based Management of Log Data
by Jerry Shenk
Sponsored by: Alert Logic
- click here PDF
Demanding More from Log Management Systems
by Jerry Shenk
Sponsored by: LogLogic
- click here PDF
Monitoring Security and Performance on Converged Traffic Networks
by SANS Analyst, Dave Shackleford
Sponsored by: NIKSUN
- click here PDF
Leveraging Event and Log Data for Security and Compliance
by SANS Analyst, Dave Shackleford
Sponsored by: Intellitactics
- click here PDF
Data Leakage Landscape: Where Data Leaks and How Next Generation Tools Apply
by SANS Analyst, Barbara Filkins and Deb Radcliff
Sponsored by: Utimaco and Trend Micro
- click here PDF
The SANS Database Audit and Compliance Survey
by SANS Analyst, Barbara Filkins
Sponsored by: Lumigent
- click here PDF
NetDetector/NetVCR 2005 Traffic Analyzer
By Jerry Shenk
Sponsored by: NIKSUN
- click here PDF
Regulations and Standards: Where Encryption Applies
By Dave Shackleford
Sponsored by: Utimaco Safeware
- click here PDF
Building Brick Houses: Applying Secure Lifecycle Practices to Web Applications
By Gary W. Longsine and Jonathan Ham
Sponsored by: Watchfire
- click here PDF
Hardware Versus Software: A Usability Comparison of Software-Based Encryption with Seagate Secure™ Hardware-Based Encryption
By J.D. Hietala
Sponsored by: Seagate
Edited May, 2008
- click here PDF
Correlating SIM information to Detect Insider Threats
By Dr. Eric Cole
Sponsored by: SenSage
- click here PDF
Using Security Information Management Systems for PCI Compliance
By Dave Shackleford
Sponsored by: SenSage
- click here PDF
Encryption Procurement: Setting a Standard
By Stephen Northcutt and Barbara Filkins
Sponsored by: Utimaco
- click here PDF
NetDetector/NetVCR 2005 Traffic Analyzer - August 2007
By Jerry Shenk
Sponsored by: NIKSUN
- click here PDF
The SANS 2007 Log Management Market Report
By Jerry Shenk
Sponsored by: LogLogic
- click here PDF
Building the Business Case for Log Management Intelligence (LMI) - November 2006
By Steve Mancini and Jerry Shenk
Sponsored by: LogLogic
- click here PDF
Penetration testing: Assessing Your Overall Security Before Attackers Do - June 2006
By Stephen Northcutt, Jerry Shenk, Dave Shackleford, Tim Rosenberg, Raul Siles and Steve Mancini
Sponsored by: CORE Impact
- click here PDF
The Log Management Industry: An Untapped Market - June 2006
By Stephen Northcutt, Jerry Shenk & Dave Shackleford
Sponsored by: LogLogic
- click here PDF
PowerBroker vs. Sudo - February 2006
By Jerry Shenk & Steve Mancini
Sponsored by: Symark
- click here PDF

Contact us: (301) 654-SANS(7267)
Monday - Friday 9am-8pm EST/EDT