Register for Network Security in Vegas by Sep 3 for $250 discount. >> More Info

SANS Institute

the most trusted source for computer security training, certification and research

SANS InfoSec Reading Room - Security Awareness

<<Reading Room Home

Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.

Featuring 42 papers as of Aug 29, 2008

Making Security Awareness Efforts Work for You: Rebecca Fowler; May 20, 2008; - download paper

The Controlled Event Framework for Information Asset Security: Chris Cronin; February 20, 2008; - download paper

Data Leakage - Threats and Mitigation: Peter Gordon; October 24, 2007; - download paper

Identity Theft: Ian Wolff; July 2, 2007; - download paper

Building a Security Policy Framework for a Large, Multi-national Company: Leslie VanCura; May 5, 2005; - download paper

The Role of the Security Analyst in the Systems Development Life Cycle: Brad Gray; May 5, 2005; - download paper

A Discussion of Spyware: Patria Leath; January 28, 2005; - download paper

Developing a Security-Awareness Culture - Improving Security Decision Making: Chris Garrett; January 18, 2005; - download paper

Examination of PC security: How we got where we are and how to fix it: Thomas Sprinkmeier; November 30, 2004; - download paper

Moving from Consciousness to Culture: Creating an Environment of Security Awareness: Mary Munley; July 25, 2004; - download paper

Overview of Security Issues Facing Computer Users: Michael Boeckeler; June 9, 2004; - download paper

Vendors and External Outsource Providers How Safe is Your Companys Confidential Data: Stan Gucwa; March 9, 2004; - download paper

The Many Facets of an Information Security Program: Robert L Behm; March 9, 2004; - download paper

System Vulnerability Mitigation: Kevin Vasquez; March 4, 2004; - download paper

Securing Wireless Networks for HIPAA Compliance: Daniel Odorisio; March 3, 2004; - download paper

The Relevance of Quantum Cryptography in Modern Cryptographic Systems: Christoph Guenther; March 3, 2004; - download paper

Attacks Against The Mechanical Pin Tumbler Lock: Craig Kawaga; March 3, 2004; - download paper

Distributed Computing: An Unstoppable Brute Force: Michael Hill; March 2, 2004; - download paper

Security Concerns in Using Open Source Software for Enterprise Requirements: Sreenivasa Rao Vadalasetty; January 11, 2004; - download paper

Awareness, A Never Ending Struggle: Douglas Alred; October 31, 2003; - download paper

awareness, quality assurance, security, techniques, implement, sans, white paper: Elizabeth Stanton; October 31, 2003; - download paper

Selling Security To Management: Jeff Hall; October 31, 2003; - download paper

Security Awareness Training and Privacy: Michelle Johnston; October 31, 2003; - download paper

The Ultimate Defense of Depth: Security Awareness in Your Company: Brian D. Voss; October 31, 2003; - download paper

Security Awareness Training Quiz - Finding the WEAKEST link!: David Sustaita; October 31, 2003; - download paper

Secure This: Organizational Buy-in (A communications approach): Wendy E. Ady; October 31, 2003; - download paper

Introduction and Education of Information Security Policies to Employees in My Organization: Harbinder Kaur; October 31, 2003; - download paper

Security Awareness Starts in IT: William Farrar; October 31, 2003; - download paper

Modeling the Silicon Curtain: John H. Saunders; October 31, 2003; - download paper

Security Awareness: Help the Users Understand: Kenton Smith; October 31, 2003; - download paper

License to Surf?: Eddy Vanlerberghe; October 31, 2003; - download paper

Data Center Physical Security Checklist: Sean Heare; October 31, 2003; - download paper

Methods and Techniques of Implementing a Security Awareness Program: William Hubbard; October 31, 2003; - download paper

Security Awareness - Implementing an Effective Strategy: Chelsa Russell; October 31, 2003; - download paper

Ghosts in the machine: The who, why, and how of attacks on information security: Cary Barker; October 31, 2003; - download paper

The Need for Information Security in Today's Economy: Jeff Tarte; October 31, 2003; - download paper

Community Policing on the Internet: Tim Brown; October 31, 2003; - download paper

Creating the effective Security Awareness Program and Demonstration: Fred Hinchcliffe; October 31, 2003; - download paper

Developing an Integrated Security Training, Awareness, and Education Program: Courtney Gilbert; October 31, 2003; - download paper

Essential Information Security For Corporate Employees: Lloyd Guyot; October 31, 2003; - download paper

Consumer Labeling for Software Security: Tom Melton; January 27, 2002; - download paper

Social Engineering Your Employees to Information Security: Martin Manjak; - download paper

SANS Reading Room

Check Them Out!

This is hands-down, the premiere training opportunity.
- Dan Mather, JICPAC

SANS Vancouver 08 skyscraper

Contact us: (301) 654-SANS(7267)
Monday - Friday 9am-8pm EST/EDT