- Training
- Training Live Events
- Training Without Travel
- Security Courses
- Security Curricula
- Certified Instructors
- Training Calendars
- SANS vLive! / SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- Coins
- SANS Onsite
- SANS SelfStudy
- SANS Summit Series
- SANS Partnership Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- List of Resources
- Top 20 List
- Top 25 Programming Errors
- 20 Coolest Jobs
- Application Security Procurement Language
- Top 10 Security Trends
- Top 5 Essential Log Reports
- Reading Room
- Webcasts
- AudioCasts
- WhatWorks
- Newsletters
- RSS Feeds
- Calendar Feeds
- Security Thought Leaders
- Security Policy Project
- Security+ Study Guide
- SANS Buyers Guide
- Security Tool Demos
- 2008 Salary Survey
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
The most trusted source for computer security training, certification and research.
Welcome to SANS Information Security Reading Room
Featuring over 1,802 original computer security white papers in 74 different categories.
Special Categories |
Last Updated |
| Last 25 Papers Added to the SANS InfoSec Reading Room | Nov 03, 09 |
| 2008 Salary & Certification Survey | Feb 05, 09 |
| Top 25 Papers Based on Views | Oct 30, 09 |
| GIAC Paper of the Quarter | April 7, 09 |
| Thought Leadership Interviews (STI) | June 30, 08 |
| Working Papers in Application Security | March 1, 09 |
| SANS Industry Analysts Program | Feb 4, 09 |
| Free Vendor White Papers | Spring 2009 |
| Free Vendor Audio Casts | Summer 2009 |
| Does Certification Matter Series | Archive |
| Book Reviews | Archive |
| Special Papers | Archive |
To access the white papers, please choose a category from the list below. You must have a working PDF viewer installed to access the papers.
Don't have Adobe Acrobat Reader? Download it for free! 
Expand Your Computer Security Knowledge With:
Category |
Last Updated |
| Acceptable Use | Mar 02, 04 |
| Application/Database Sec | Sep 29, 09 |
| Attacking Attackers | Oct 31, 03 |
| Auditing & Assessment | Sep 29, 09 |
| Authentication | Oct 15, 09 |
| Backup Strategies | Oct 09, 08 |
| Best Practices | Sep 29, 09 |
| Case Studies | Sep 28, 09 |
| Commercial Software | Jan 26, 05 |
| Compliance | Sep 29, 09 |
| Country-specific Issues | Sep 16, 04 |
| Covert Channels | Feb 07, 08 |
| Data Loss Prevention | Feb 11, 09 |
| Digital Certificates | Oct 31, 03 |
| Digital Privacy | Dec 03, 08 |
| Directories | Mar 15, 07 |
| Disaster Recovery | Aug 07, 08 |
| DNS Issues | Dec 30, 08 |
| eCommerce | Sep 29, 09 |
| Email Issues | Jan 12, 09 |
| Encryption & VPNs | Sep 29, 09 |
| Firewalls & Perimeter Protection | Apr 23, 09 |
| Forensics | Sep 08, 09 |
| Getting Started/InfoSec | Aug 18, 06 |
| Hackers | Dec 11, 07 |
| HIPAA | Mar 09, 05 |
| Home & Small Office | Oct 05, 05 |
| Incident Handling | Oct 01, 09 |
| Information Assurance | May 05, 05 |
| Information Warfare | Aug 24, 05 |
| Intrusion Detection | Oct 06, 09 |
| Intrusion Prevention | Oct 23, 08 |
| ISO-17799 | Jan 24, 08 |
| Legal Issues | Feb 01, 08 |
| Linux Issues | Jan 14, 08 |
| Logging Technology and Techniques | Oct 06, 09 |
| Mac/Apple Issues | Jan 09, 09 |
Category |
Last Updated |
|
| Mainframes | Jun 30, 05 | |
| Malicious Code | Apr 23, 09 | |
| Managed Services | Jun 29, 05 | |
| Management & Leadership | Oct 27, 09 | |
| Network Devices | Apr 27, 09 | |
| Novell/Netware Issues | Jan 22, 05 | |
| PDAs and Other Mobile Devices | Jun 24, 08 | |
| Penetration Testing | Nov 03, 09 | |
| Physical Security | Aug 30, 07 | |
| Protocols | Sep 27, 07 | |
| Scripting Tips | Mar 25, 04 | |
| Securing Code | Feb 01, 08 | |
| Security Awareness | Oct 08, 09 | |
| Security Basics | Jun 25, 08 | |
| Security Modeling | Jul 03, 08 | |
| Security Policy Issues | Sep 27, 07 | |
| Social Engineering | Oct 14, 08 | |
| Solaris Issues | May 05, 05 | |
| Standards | Aug 24, 05 | |
| Steganography | Jul 03, 08 | |
| Storage | Mar 02, 04 | |
| System Administration | Oct 01, 07 | |
| Telecommuting | Oct 31, 03 | |
| Telephone Issues | May 05, 05 | |
| Terminal Services | Feb 14, 07 | |
| Threats/Vulnerabilities | Mar 28, 08 | |
| Tools | Jun 18, 09 | |
| Travel Security | Oct 31, 03 | |
| Unix Issues | Aug 03, 07 | |
| VOIP Issues | Dec 29, 08 | |
| Web Servers | Jan 18, 07 | |
| Windows .NET | Nov 13, 08 | |
| Windows 2000 Issues | Oct 31, 03 | |
| Windows Issues | Mar 28, 08 | |
| Wireless Access | May 04, 09 | |
| Work Monitoring | Sep 17, 08 |
VENDORS: For information on advertisements or placing your white paper in the SANS Information Security Reading Room visit, http://www.sans.org/vendor/banners.php.
"Expand your mastery of Information Security through SANS Training - As YOU Like It!"
LIVE in GREAT CITIES!
LIVE at YOUR SITE!
LIVE ONLINE!
or ONLINE at YOUR OWN PACE!
Submit your paper to the GIAC White Paper of the Quarter Program
Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.
All papers are copyrighted. No re-posting of them or distribution of them is permitted.
- © 2000-2009 The SANS™ Institute
- Web Privacy Policy | Web Contact |
- Press Room | Trademark Usage Policy