- Training
- Training - ALL
- Training - US / Canada
- Training - EMEA
- Training - International
- Training - Virtual
- SANS Courses
- Courses - Best Sellers
- Training Calendars
- SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- SANS Onsite
- SANS SelfStudy
- SANS Partnership Series
- SANS Workshop Series
- Webcasts
- Career Roadmap
- Certified Instructors
- Work Study
- Group Discounts
- Events Archive
- DoD 8570
- Voucher Credit Program
- Certification
- Resources
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
the most trusted source for computer security training, certification and research
Welcome to SANS' Information Security Reading Room
Featuring over 1698 original computer security white papers in 73 different categories.
Special Categories |
Last Updated |
| Last 25 Papers Added to the SANS InfoSec Reading Room | Apr 11, 08 |
| Top 25 Papers Based on Views | May 02, 08 |
| GIAC Honors Papers | May 01, 07 |
| SANS Industry Analysts Program | Apr 23, 08 |
| Data Loss Prevention (DLP) | Dec 7, 07 |
| Security Roadmap v.10 - Free Vendor White Papers | Spring 2008 |
| Does Certification Matter Series | Archive |
| Book Reviews | Archive |
| Special Papers | Archive |
To access the white papers, please choose a category from the list below. You must have a working PDF viewer installed to access the papers.
Don't have Adobe Acrobat Reader? Download it for free! 
Expand Your Computer Security Knowledge With:
Category |
Last Updated |
| Acceptable Use | Mar 02, 04 |
| Application/Database Sec | Jan 04, 08 |
| Attacking Attackers | Oct 31, 03 |
| Auditing & Assessment | Mar 31, 08 |
| Authentication | Aug 07, 07 |
| Backup Strategies | May 05, 05 |
| Best Practices | Jul 27, 07 |
| Case Studies | Mar 28, 08 |
| Commercial Software | Jan 26, 05 |
| Country-specific Issues | Sep 16, 04 |
| Covert Channels | Feb 07, 08 |
| Data Loss Prevention | Oct 31, 03 |
| Digital Certificates | Oct 31, 03 |
| Digital Privacy | Feb 14, 07 |
| Directories | Mar 15, 07 |
| Disaster Recovery | Oct 04, 07 |
| DNS Issues | May 05, 05 |
| eCommerce | Aug 29, 06 |
| Email Issues | Nov 20, 07 |
| Encryption & VPNs | Oct 26, 07 |
| Firewalls & Perimeter Protection | Aug 09, 07 |
| Forensics | Dec 11, 07 |
| Getting Started/InfoSec | Aug 18, 06 |
| Hackers | Dec 11, 07 |
| HIPAA | Mar 09, 05 |
| Home & Small Office | Oct 05, 05 |
| Incident Handling | Mar 04, 08 |
| Information Assurance | May 05, 05 |
| Information Warfare | Aug 24, 05 |
| Intrusion Detection | Apr 11, 08 |
| Intrusion Prevention | Apr 11, 08 |
| ISO-17799 | Jan 24, 08 |
| Legal Issues | Feb 01, 08 |
| Linux Issues | Jan 14, 08 |
| Logging Technology and Techniques | Jan 31, 08 |
| Mac/Apple Issues | Dec 07, 06 |
Category |
Last Updated |
|
| Mainframes | Jun 30, 05 | |
| Malicious Code | Feb 12, 08 | |
| Managed Services | Jun 29, 05 | |
| Management & Leadership | Sep 12, 07 | |
| Network Devices | Oct 15, 07 | |
| Novell/Netware Issues | Jan 22, 05 | |
| PDAs and Other Mobile Devices | May 17, 05 | |
| Penetration Testing | Nov 06, 07 | |
| Physical Security | Aug 30, 07 | |
| Protocols | Sep 27, 07 | |
| Scripting Tips | Mar 25, 04 | |
| Securing Code | Feb 01, 08 | |
| Security Awareness | Feb 20, 08 | |
| Security Basics | Jan 29, 08 | |
| Security Modeling | Mar 28, 08 | |
| Security Policy Issues | Sep 27, 07 | |
| Social Engineering | Dec 20, 07 | |
| Solaris Issues | May 05, 05 | |
| Standards | Aug 24, 05 | |
| Steganography | May 05, 05 | |
| Storage | Mar 02, 04 | |
| System Administration | Oct 01, 07 | |
| Telecommuting | Oct 31, 03 | |
| Telephone Issues | May 05, 05 | |
| Terminal Services | Feb 14, 07 | |
| Threats/Vulnerabilities | Mar 28, 08 | |
| Tools | Sep 27, 07 | |
| Travel Security | Oct 31, 03 | |
| Unix Issues | Aug 03, 07 | |
| VOIP Issues | Dec 21, 07 | |
| Web Servers | Jan 18, 07 | |
| Windows .NET | Oct 31, 03 | |
| Windows 2000 Issues | Oct 31, 03 | |
| Windows Issues | Mar 28, 08 | |
| Wireless Access | Feb 20, 08 | |
| Work Monitoring | Oct 31, 03 |
VENDORS: For information on advertisements or placing your white paper in the SANS Information Security Reading Room visit, http://www.sans.org/vendor/banners.php.
"Expand your mastery of Information Security through SANS Training - As YOU Like It!"
LIVE in GREAT CITIES!
LIVE at YOUR SITE!
LIVE ONLINE!
or ONLINE at YOUR OWN PACE!
Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.
All papers are copyrighted. No re-posting of them or distribution of them is permitted.