- Training
- Training Live Events
- Training Without Travel
- SANS Courses
- Certified Instructors
- Career Roadmap
- Training Calendars
- SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- SANS Onsite
- SANS SelfStudy
- SANS Partnership Series
- SANS Workshop Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- Certification
- Resources
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
the most trusted source for computer security training, certification and research
Welcome to SANS' Information Security Reading Room
Featuring over 1713 original computer security white papers in 73 different categories.
Special Categories |
Last Updated |
| Last 25 Papers Added to the SANS InfoSec Reading Room | Jul 03, 08 |
| Top 25 Papers Based on Views | Jul 04, 08 |
| Thought Leadership Interviews (STI) | June 30, 08 |
| GIAC Honors Papers | May 01, 07 |
| SANS Industry Analysts Program | Apr 23, 08 |
| Data Loss Prevention (DLP) | Dec 7, 07 |
| Security Roadmap v.10 - Free Vendor White Papers | Spring 2008 |
| Does Certification Matter Series | Archive |
| Book Reviews | Archive |
| Special Papers | Archive |
To access the white papers, please choose a category from the list below. You must have a working PDF viewer installed to access the papers.
Don't have Adobe Acrobat Reader? Download it for free! 
Expand Your Computer Security Knowledge With:
Category |
Last Updated |
| Acceptable Use | Mar 02, 04 |
| Application/Database Sec | Jan 04, 08 |
| Attacking Attackers | Oct 31, 03 |
| Auditing & Assessment | Jun 18, 08 |
| Authentication | Aug 07, 07 |
| Backup Strategies | May 05, 05 |
| Best Practices | Jul 27, 07 |
| Case Studies | Mar 28, 08 |
| Commercial Software | Jan 26, 05 |
| Country-specific Issues | Sep 16, 04 |
| Covert Channels | Feb 07, 08 |
| Data Loss Prevention | Oct 31, 03 |
| Digital Certificates | Oct 31, 03 |
| Digital Privacy | Feb 14, 07 |
| Directories | Mar 15, 07 |
| Disaster Recovery | Oct 04, 07 |
| DNS Issues | May 05, 05 |
| eCommerce | Aug 29, 06 |
| Email Issues | Nov 20, 07 |
| Encryption & VPNs | Oct 26, 07 |
| Firewalls & Perimeter Protection | Aug 09, 07 |
| Forensics | Jun 25, 08 |
| Getting Started/InfoSec | Aug 18, 06 |
| Hackers | Dec 11, 07 |
| HIPAA | Mar 09, 05 |
| Home & Small Office | Oct 05, 05 |
| Incident Handling | Jun 23, 08 |
| Information Assurance | May 05, 05 |
| Information Warfare | Aug 24, 05 |
| Intrusion Detection | Apr 11, 08 |
| Intrusion Prevention | Jun 24, 08 |
| ISO-17799 | Jan 24, 08 |
| Legal Issues | Feb 01, 08 |
| Linux Issues | Jan 14, 08 |
| Logging Technology and Techniques | Jan 31, 08 |
| Mac/Apple Issues | Dec 07, 06 |
Category |
Last Updated |
|
| Mainframes | Jun 30, 05 | |
| Malicious Code | Feb 12, 08 | |
| Managed Services | Jun 29, 05 | |
| Management & Leadership | Sep 12, 07 | |
| Network Devices | Oct 15, 07 | |
| Novell/Netware Issues | Jan 22, 05 | |
| PDAs and Other Mobile Devices | Jun 24, 08 | |
| Penetration Testing | Nov 06, 07 | |
| Physical Security | Aug 30, 07 | |
| Protocols | Sep 27, 07 | |
| Scripting Tips | Mar 25, 04 | |
| Securing Code | Feb 01, 08 | |
| Security Awareness | May 20, 08 | |
| Security Basics | Jun 25, 08 | |
| Security Modeling | Jul 03, 08 | |
| Security Policy Issues | Jul 03, 08 | |
| Social Engineering | Dec 01, 07 | |
| Solaris Issues | May 05, 05 | |
| Standards | Aug 24, 05 | |
| Steganography | Jul 03, 08 | |
| Storage | Mar 02, 04 | |
| System Administration | Oct 01, 07 | |
| Telecommuting | Oct 31, 03 | |
| Telephone Issues | May 05, 05 | |
| Terminal Services | Feb 14, 07 | |
| Threats/Vulnerabilities | Mar 28, 08 | |
| Tools | Sep 27, 07 | |
| Travel Security | Oct 31, 03 | |
| Unix Issues | Aug 03, 07 | |
| VOIP Issues | Dec 21, 07 | |
| Web Servers | Jan 18, 07 | |
| Windows .NET | Oct 31, 03 | |
| Windows 2000 Issues | Oct 31, 03 | |
| Windows Issues | Mar 28, 08 | |
| Wireless Access | Jun 18, 08 | |
| Work Monitoring | Oct 31, 03 |
VENDORS: For information on advertisements or placing your white paper in the SANS Information Security Reading Room visit, http://www.sans.org/vendor/banners.php.
"Expand your mastery of Information Security through SANS Training - As YOU Like It!"
LIVE in GREAT CITIES!
LIVE at YOUR SITE!
LIVE ONLINE!
or ONLINE at YOUR OWN PACE!
Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.
All papers are copyrighted. No re-posting of them or distribution of them is permitted.