SANS Information Security Reading Room http://www.sans.org/reading_room/ Last 25 Computer Security Papers added to the Reading Room en-us (C) SANS Institute 2009 webmaster@sans.org SANS RSS Feed http://www.sans.org/images/rss_logo.gif http://www.sans.org/reading_room/ SANS 2009 http://www.sans.org/info/35964/ http://www.sans.org/info/35964/ More than 35 courses, SANS top instructors, all in one great place! SANS 2009 is being held in Orlando, FL on March 2-9. Register today! <![CDATA[Gathering Security Metrics and Reaping the Rewards]]> http://www.sans.org/reading_room/whitepapers/leadership/rss/gathering_security_metrics_and_reaping_the_rewards_33234 http://www.sans.org/reading_room/whitepapers/leadership/rss/gathering_security_metrics_and_reaping_the_rewards_33234 Category: Management & Leadership

Paper Added: November 16, 2009

]]> <![CDATA[Hey Dude! I Can Do a Great Humphrey Bogart!]]> http://www.sans.org/reading_room/whitepapers/networkdevs/rss/hey_dude_i_can_do_a_great_humphrey_bogart_33233 http://www.sans.org/reading_room/whitepapers/networkdevs/rss/hey_dude_i_can_do_a_great_humphrey_bogart_33233 Category: Network Devices

Paper Added: November 11, 2009

]]> <![CDATA[A Multi-Perspective View of PHP Remote File Include Attacks]]> http://www.sans.org/reading_room/whitepapers/detection/rss/a_multiperspective_view_of_php_remote_file_include_attacks_33229 http://www.sans.org/reading_room/whitepapers/detection/rss/a_multiperspective_view_of_php_remote_file_include_attacks_33229 Categories: Intrusion Detection,Intrusion Prevention

Paper Added: November 10, 2009

]]> <![CDATA[Check Point Firewall Log Analysis In-Depth]]> http://www.sans.org/reading_room/whitepapers/logging/rss/check_point_firewall_log_analysis_indepth_33228 http://www.sans.org/reading_room/whitepapers/logging/rss/check_point_firewall_log_analysis_indepth_33228 Category: Logging Technology and Techniques

Paper Added: November 10, 2009

]]> <![CDATA[Efficiently Deducing IDS False Positives Using System Profiling ]]> http://www.sans.org/reading_room/whitepapers/detection/rss/efficiently_deducing_ids_false_positives_using_system_profiling_33223 http://www.sans.org/reading_room/whitepapers/detection/rss/efficiently_deducing_ids_false_positives_using_system_profiling_33223 Categories: Intrusion Detection,Intrusion Prevention

Paper Added: November 9, 2009

]]> <![CDATA[Why Crack When You Can Pass the Hash?]]> http://www.sans.org/reading_room/whitepapers/testing/rss/why_crack_when_you_can_pass_the_hash_33219 http://www.sans.org/reading_room/whitepapers/testing/rss/why_crack_when_you_can_pass_the_hash_33219 Category: Penetration Testing

Paper Added: November 3, 2009

]]> <![CDATA[A Fuzzing Approach to Credentials Discovery using Burp Intruder]]> http://www.sans.org/reading_room/whitepapers/testing/rss/a_fuzzing_approach_to_credentials_discovery_using_burp_intruder_33214 http://www.sans.org/reading_room/whitepapers/testing/rss/a_fuzzing_approach_to_credentials_discovery_using_burp_intruder_33214 Category: Penetration Testing

Paper Added: October 29, 2009

]]> <![CDATA[Women in IT Security Project Management]]> http://www.sans.org/reading_room/whitepapers/leadership/rss/women_in_it_security_project_management_33209 http://www.sans.org/reading_room/whitepapers/leadership/rss/women_in_it_security_project_management_33209 Category: Management & Leadership

Paper Added: October 27, 2009

]]> <![CDATA[Two-Factor Authentication: Can You Choose the Right One?]]> http://www.sans.org/reading_room/whitepapers/authentication/rss/twofactor_authentication_can_you_choose_the_right_one_33093 http://www.sans.org/reading_room/whitepapers/authentication/rss/twofactor_authentication_can_you_choose_the_right_one_33093 Category: Authentication

Paper Added: October 15, 2009

]]> <![CDATA[Security Concerns in Using Open Source Software for Enterprise Requirements]]> http://www.sans.org/reading_room/whitepapers/awareness/rss/security_concerns_in_using_open_source_software_for_enterprise_requirements_1305 http://www.sans.org/reading_room/whitepapers/awareness/rss/security_concerns_in_using_open_source_software_for_enterprise_requirements_1305 Category: Security Awareness

Paper Added: October 8, 2009

]]> <![CDATA[Harness the Power of SIEM ]]> http://www.sans.org/reading_room/whitepapers/detection/rss/harness_the_power_of_siem_33204 http://www.sans.org/reading_room/whitepapers/detection/rss/harness_the_power_of_siem_33204 Categories: Intrusion Detection,Logging Technology and Techniques

Paper Added: October 6, 2009

]]> <![CDATA[Cisco Security Agent and Incident Handling ]]> http://www.sans.org/reading_room/whitepapers/incident/rss/cisco_security_agent_and_incident_handling_33203 http://www.sans.org/reading_room/whitepapers/incident/rss/cisco_security_agent_and_incident_handling_33203 Category: Incident Handling

Paper Added: October 1, 2009

]]> <![CDATA[Best Practices in Data Protection: Encryption, Key Management and Tokenization ]]> http://www.sans.org/reading_room/whitepapers/application/rss/best_practices_in_data_protection_encryption_key_management_and_tokenization_33199 http://www.sans.org/reading_room/whitepapers/application/rss/best_practices_in_data_protection_encryption_key_management_and_tokenization_33199 Categories: Application/Database Sec,Best Practices,Encryption & VPNs,Compliance

Paper Added: September 29, 2009

]]> <![CDATA[Six Ways to Reduce PCI DSS Audit Scope by Tokenizing Cardholder data]]> http://www.sans.org/reading_room/whitepapers/bestprac/rss/six_ways_to_reduce_pci_dss_audit_scope_by_tokenizing_cardholder_data_33194 http://www.sans.org/reading_room/whitepapers/bestprac/rss/six_ways_to_reduce_pci_dss_audit_scope_by_tokenizing_cardholder_data_33194 Categories: Best Practices,eCommerce,Encryption & VPNs,Compliance

Paper Added: September 29, 2009

]]> <![CDATA[Simple Windows Batch Scripting for Intrusion Discovery]]> http://www.sans.org/reading_room/whitepapers/auditing/rss/simple_windows_batch_scripting_for_intrusion_discovery_33193 http://www.sans.org/reading_room/whitepapers/auditing/rss/simple_windows_batch_scripting_for_intrusion_discovery_33193 Categories: Auditing & Assessment,Incident Handling

Paper Added: September 29, 2009

]]> <![CDATA[Mitigating Insider Sabotage]]> http://www.sans.org/reading_room/whitepapers/casestudies/rss/mitigating_insider_sabotage_33189 http://www.sans.org/reading_room/whitepapers/casestudies/rss/mitigating_insider_sabotage_33189 Categories: Case Studies,Incident Handling

Paper Added: September 28, 2009

]]> <![CDATA[Security Incident Handling in High Availability Environments ]]> http://www.sans.org/reading_room/whitepapers/incident/rss/security_incident_handling_in_high_availability_environments_33188 http://www.sans.org/reading_room/whitepapers/incident/rss/security_incident_handling_in_high_availability_environments_33188 Category: Incident Handling

Paper Added: September 15, 2009

]]> <![CDATA[Investigative Tree Models]]> http://www.sans.org/reading_room/whitepapers/incident/rss/investigative_tree_models_33183 http://www.sans.org/reading_room/whitepapers/incident/rss/investigative_tree_models_33183 Category: Incident Handling

Paper Added: September 15, 2009

]]> <![CDATA[Mac OS X Malware Analysis]]> http://www.sans.org/reading_room/whitepapers/forensics/rss/mac_os_x_malware_analysis_33178 http://www.sans.org/reading_room/whitepapers/forensics/rss/mac_os_x_malware_analysis_33178 Category: Forensics

Paper Added: September 8, 2009

]]> <![CDATA[Incident Handlers Guide to SQL Injection Worms]]> http://www.sans.org/reading_room/whitepapers/incident/rss/incident_handlers_guide_to_sql_injection_worms_33133 http://www.sans.org/reading_room/whitepapers/incident/rss/incident_handlers_guide_to_sql_injection_worms_33133 Category: Incident Handling

Paper Added: June 18, 2009

]]> <![CDATA[Building an Automated Behavioral Malware Analysis Environment using Open Source Software]]> http://www.sans.org/reading_room/whitepapers/tools/rss/building_an_automated_behavioral_malware_analysis_environment_using_open_source_software_33129 http://www.sans.org/reading_room/whitepapers/tools/rss/building_an_automated_behavioral_malware_analysis_environment_using_open_source_software_33129 Category: Tools

Paper Added: June 18, 2009

]]> <![CDATA[PCI DSS and Incident Handling: What is required before, during and after an incident]]> http://www.sans.org/reading_room/whitepapers/compliance/rss/pci_dss_and_incident_handling_what_is_required_before_during_and_after_an_incident_33119 http://www.sans.org/reading_room/whitepapers/compliance/rss/pci_dss_and_incident_handling_what_is_required_before_during_and_after_an_incident_33119 Category: Compliance

Paper Added: June 16, 2009

]]> <![CDATA[Virtual Rapid Response Systems]]> http://www.sans.org/reading_room/whitepapers/incident/rss/virtual_rapid_response_systems_33114 http://www.sans.org/reading_room/whitepapers/incident/rss/virtual_rapid_response_systems_33114 Category: Incident Handling

Paper Added: June 11, 2009

]]> <![CDATA[Effective Time and Communication Management]]> http://www.sans.org/reading_room/whitepapers/leadership/rss/effective_time_and_communication_management_33113 http://www.sans.org/reading_room/whitepapers/leadership/rss/effective_time_and_communication_management_33113 Category: Management & Leadership

Paper Added: June 9, 2009

]]> <![CDATA[IOScat - a Port of Netcat's TCP functions to Cisco IOS]]> http://www.sans.org/reading_room/whitepapers/tools/rss/ioscat_a_port_of_netcats_tcp_functions_to_cisco_ios_33109 http://www.sans.org/reading_room/whitepapers/tools/rss/ioscat_a_port_of_netcats_tcp_functions_to_cisco_ios_33109 Category: Tools

Paper Added: May 29, 2009

]]>