SANS InfoSec Reading Room - Data Loss Prevention

Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.

Featuring 7 papers as of May 20, 2013

Data Loss Prevention

Information Risks & Risk Management

By: John Wurzler (posted on May 1, 2013)

In a relatively short period of time, data in the business world has moved from paper files, carbon copies, and filing cabinets to electronic files stored on very powerful computers.

People, Process, and Technologies Impact on Information Data Loss

By: Paul Janes (posted on November 9, 2012)

Organizations have always had contend with issue of data loss; however, with the advent of the computer and worldwide connectivity, the problem has become magnified.

The Risks of Client-Side Data Storage

By: Edwin Tump (posted on May 16, 2011)

One Touch Disaster Recovery Solution for Continuity of Operations

By: Rajat Ravinder Varuni (posted on May 28, 2010)

In this publication I present a solution where information is available during or following a disaster.

The Business Justification for Data Security

By: Securosis (posted on February 11, 2009)

In the information security world we face two major types of threats: “noisy” threats which directly interfere with our ability to do business and “quiet” threats which cause real damage, but don’t necessarily prevent people from doing their jobs. Noisy threats such as viruses, worms, and spam; attack both networks and systems, and clearly disrupt productivity and business operations. With highly visible (and often very annoying) attacks, it’s easy to justify investments to curb their impact. When the CFO see hundreds of spam messages in his inbox, he’s very likely to fund an anti-spam solution.

Data Loss Prevention

By: Prathaben Kanagasingham (posted on September 5, 2008)

The Mechanisms and Effects of the Code Red Worm

By: ReneeC. Schauer (posted on October 31, 2003)

This paper addresses the vulnerability that was present in Microsoft Internet Information Services (IIS) web server software and the worm, Code Red, which exploited this vulnerability.