the most trusted source for computer security training, certification and research


Last 25 papers added to the Reading Room

Last Updated Jun 25, 2009
Inside a Phish
John Brozycki
Category: Case Studies
Posted: June 25, 2009

Scanning Windows Deeper With the Nmap Scanning Engine
Ron Bowes
Category: Penetration Testing
Posted: June 22, 2009

A Virtually Secure Browser
Seth Misenar
Category: Home & Small Office
Posted: June 22, 2009

Incident Handlers Guide to SQL Injection Worms
Justin Folkerts
Category: Incident Handling
Posted: June 18, 2009

Building an Automated Behavioral Malware Analysis Environment using Open Source Software
Jim Clausing
Category: Tools
Posted: June 18, 2009

PCI DSS and Incident Handling: What is required before, during and after an incident
Christian J. Moldes
Category: Incident Handling
Posted: June 16, 2009

Virtual Rapid Response Systems
Chris Mohan
Category: Incident Handling
Posted: June 11, 2009

Effective Time and Communication Management
Brad Ruppert
Category: Management & Leadership
Posted: June 9, 2009

IOScat - a Port of Netcat's TCP functions to Cisco IOS
Robert Vandenbrink
Category: Tools
Posted: May 29, 2009

AppSec - Cross Site Request Forgery: What Attackers Don't Want You to Know
Jason Lam & Johannes B. Ullrich
Category: Application/Database Sec
Posted: May 22, 2009

Beer - The Key Ingredient to Team Development
Brad Ruppert
Category: Management & Leadership
Posted: May 20, 2009

An Inexpensive Wireless IDS using Kismet and OpenWRT
Jason Murray
Category: Intrusion Detection
Posted: May 4, 2009

Post Acquisition Audit in 30 Days
Brad Ruppert
Category: Auditing & Assessment
Posted: May 4, 2009

Two-Factor Authentication: Can You Choose the Right One?
Emilio Valente
Category: Authentication
Posted: May 1, 2009

Are Network Designs Ready for a Pandemic?
Alan R. Mercer
Category: Network Devices
Posted: April 27, 2009

Securing the Enterprise Service Bus: Protecting business critical web-services
Michael Taylor
Category: Firewalls & Perimeter Protection
Posted: April 23, 2009

Content Monitoring Issues – Legal and Otherwise
Darryl T Barnes
Category: Legal Issues
Posted: April 23, 2009

Reverse Engineering a Windows “Screensaver” e-Postcard
Seth Hardy
Category: Malicious Code
Posted: April 23, 2009

The SirEG Toolkit
François Bégin
Category: Incident Handling
Posted: April 23, 2009

Snort 3.0 Beta 3 for Analysts
Doug Burks
Category: Intrusion Detection
Posted: April 15, 2009

Improving the Management of Information Security in Canadian Government Departments
Ken Fogalin
Category: Management & Leadership
Posted: April 13, 2009

A Guide to Encrypted Storage Incident Handling
Wylie Shanks
Category: Incident Handling
Posted: April 9, 2009

Intrusion Detection & Response - Leveraging Next Generation Firewall Technology
Ahmed Abdel-Aziz
Category: Firewalls & Perimeter Protection
Posted: March 30, 2009

Techniques and Tools for Recovering and Analyzing Data from Volatile Memory
Kristine Amari
Category: Forensics
Posted: March 26, 2009

Prelude as a Hybrid IDS Framework
Curt Yasm
Category: Security Awareness
Posted: March 24, 2009


Contact us: (301) 654-SANS(7267)
Monday - Friday 9am-8pm EST/EDT