SANS Institute

the most trusted source for computer security training, certification and research

About SANS Industry Analysts Program

SANS Industry Analysts perform research to identify trends in the IT, IT Security, Operations and IT Audit markets, with access to resources unparalleled anywhere else: The Internet Storm Center for latest in threat information; the GIAC Advisory board of more than 2000 experts with scores of 90 or above on certification exams; and the MGT 512 Alumni on issues and concerns that impact management. If you are interested in learning more, please contact vendor@sans.org.

Featuring 24 Papers as of July 1, 2009

SANS Review: McAfee's Total Protection for Data: by Dave Shackleford; Sponsored by: McAfee; - click here
SANS Annual 2009 Log Management Survey: by Jerry Shenk; Sponsored by: ArcSight, Intellitactics, and Loglogic; - click here
Benchmarking Security Information Event Management (SIEM): by J. Michael Butler; Sponsored by: NitroSecurity; - click here
ArcSight Logger Review: by Jerry Shenk; Sponsored by: ArcSight; - click here; Spanish Translation: Español - click here
Real-Time Adaptive Security: by Dave Shackleford; Sponsored by: Sourcefire; - click here
Log Management in the Cloud: A Comparison of In-House versus Cloud-Based Management of Log Data: by Jerry Shenk; Sponsored by: Alert Logic; - click here
Demanding More from Log Management Systems: by Jerry Shenk; Sponsored by: LogLogic; - click here
Monitoring Security and Performance on Converged Traffic Networks: by SANS Analyst, Dave Shackleford; Sponsored by: NIKSUN; - click here
Leveraging Event and Log Data for Security and Compliance: by SANS Analyst, Dave Shackleford; Sponsored by: Intellitactics; - click here
Data Leakage Landscape: Where Data Leaks and How Next Generation Tools Apply: by SANS Analyst, Barbara Filkins and Deb Radcliff; Sponsored by: Utimaco and Trend Micro; - click here
The SANS Database Audit and Compliance Survey: by SANS Analyst, Barbara Filkins; Sponsored by: Lumigent; - click here
NetDetector/NetVCR 2005 Traffic Analyzer: By Jerry Shenk; Sponsored by: NIKSUN; - click here
Regulations and Standards: Where Encryption Applies: By Dave Shackleford; Sponsored by: Utimaco Safeware; - click here
Building Brick Houses: Applying Secure Lifecycle Practices to Web Applications: By Gary W. Longsine and Jonathan Ham; Sponsored by: Watchfire; - click here
Hardware Versus Software: A Usability Comparison of Software-Based Encryption with Seagate Secure™ Hardware-Based Encryption: By J.D. Hietala; Sponsored by: Seagate; Edited May, 2008; - click here
Correlating SIM information to Detect Insider Threats: By Dr. Eric Cole; Sponsored by: SenSage; - click here
Using Security Information Management Systems for PCI Compliance: By Dave Shackleford; Sponsored by: SenSage; - click here
Encryption Procurement: Setting a Standard: By Stephen Northcutt and Barbara Filkins; Sponsored by: Utimaco; - click here
NetDetector/NetVCR 2005 Traffic Analyzer - August 2007: By Jerry Shenk; Sponsored by: NIKSUN; - click here
The SANS 2007 Log Management Market Report: By Jerry Shenk; Sponsored by: LogLogic; - click here
Building the Business Case for Log Management Intelligence (LMI) - November 2006: By Steve Mancini and Jerry Shenk; Sponsored by: LogLogic; - click here
Penetration testing: Assessing Your Overall Security Before Attackers Do - June 2006: By Stephen Northcutt, Jerry Shenk, Dave Shackleford, Tim Rosenberg, Raul Siles and Steve Mancini; Sponsored by: CORE Impact; - click here
The Log Management Industry: An Untapped Market - June 2006: By Stephen Northcutt, Jerry Shenk & Dave Shackleford; Sponsored by: LogLogic; - click here
PowerBroker vs. Sudo - February 2006: By Jerry Shenk & Steve Mancini; Sponsored by: Symark; - click here

Check Them Out!

The information presented is priceless!
-Nehal Parmar, North Fork Bank