Software Security
Security Training
Security Certification
Internet Storm Center
Cyber Security Graduate School
Security Awareness Training
ICS/SCADA
Penetration Testing
Cyber Defense Foundations
IT Audit
Computer ForensicsMost of these computer security white papers have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS Software Security attempts to ensure the accuracy of information, but papers are published "as is".
Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.
Application and Database Security
Authentication
| Two-Factor Authentication: Can You Choose the Right One? | Emilio Valente | Oct 15, 2009 |
| OS and Application Fingerprinting Techniques | Jon Mark Allen | Oct 22, 2008 |
| Simple Formula for Strong Passwords (SFSP) Tutorial | Bernie Thomas | May 17, 2005 |
| Installing a Secure Network DHCP Registration System | Pam Fournier | May 5, 2005 |
| Secure implementation of Enterprise single sign-on product in an organization | Ravikanth Ponnapalli | Jan 18, 2005 |
| Papers taken from SANS Reading Room. | ||
Securing Code
| Which Disney© Princess are YOU? | Joshua Brower | Mar 18, 2010 |
| Secure Authentication on the Internet | Roger Meyer | Feb 1, 2008 |
| Software Engineering - Security as a Process in the SDLC | Nithin Haridas | Aug 7, 2007 |
| How to Avoid Information Disclosure when Managing Windows with WMI | Alex Timkov | Jul 17, 2007 |
| Threat Modeling: A Process To Ensure Application Security | Steven Burns | Oct 5, 2005 |
| Papers taken from SANS Reading Room. | ||
Applications and Systems Development Security
| Paper | Author | Date |
|---|---|---|
| Building Security into the System Development Life Cycle (SDLC): A Case Study | James Purcell | Aug 9, 2007 |
| Application Security | Dan McGinn-Combs | Apr 9, 2007 |
| Defining and Understanding Security in the Software Development Life Cycle | James Purcell | Apr 6, 2007 |
| Outsourcing | Daniel Accioly Rosa | Mar 30, 2007 |
| Comparing Software Development Life Cycles | Jim Hurst | Mar 23, 2007 |
| Comparison of Java Applets and ActiveX Controls | Jim Hurst | Mar 23, 2007 |
| Employee Management Security Controls | James E. Purcell | Mar 23, 2007 |
| The Capability Maturity Model and Its Applications | Jim Hurst | Mar 20, 2007 |
| Overview and Tutorial on Artificial Intelligence Systems | Jim Hurst | Mar 20, 2007 |
| Comparison of Software Development Lifecycle Methodologies | James Purcell | Feb 12, 2007 |
| Papers taken from the CISSP® certification prep domain. | ||
