Security White Papers

The papers listed here are vendor agnostic, even though some contain product functionality only to drive home a point.  These documents are for use for personal, staff, or classroom training as long as the paper’s source is retained.  [Additional training materials available at my website…]

• Practical Application of Biometrics (2011)
• Incident Management: Managing the Inevitable (2011)
• Microsoft Virtual Server Security: 10 Tips and Settings (2011)
• Business Continuity Event Planning (2008/2009)
• Series on building and managing an Information Security Awareness Training Program (2008)
• Business Continuity Planning Series (2008)
• Incident Management Series (2008)
• Series on use of free Sysinternals utilities for security management and testing (2008)
• Prepare for e-discovery requests: How to avoid disastrous legal sanctions and fines (September 9, 2008)
• Evaluation of TrueCrypt as a Mobile Data Encryption Solution (April 19, 2008) (PDF) (MobiPocket)
• Keystroke Logging (April 4, 2008)
• A Practical Approach to Management Information System Risk (February 2, 2008)
• Improve Data Protection Processes with Content Discovery, Monitoring, and Filtering (November 7, 2008)
• Desktop Application Virtualization and Application Streaming: Function and Security Benefits (August 30, 2007)
• Protect Your Organization from Steganographic Data Theft (February 12, 2007)
• Getting to Secure Internet Identity Management (February 12, 2007)
• Keystroke Dynamics: Low impact biometrics verification (September 23, 2006)
• Fundamentals of Storage Media Sanitation (June 3, 2006)
• Spreadsheet Assurance (May 8, 2006)
• Build an Effective Security Awareness Program (April 8, 2006)
• DNS Cache Poisoning: Definition and Prevention (March 16, 2006)
• A Practical Approach to Threat Modeling (March 4, 2006)
• Data Storage Security (February 6, 2006)
• Securing Instant Messaging (January 15, 2006)