Coldstream Authored White Papers Return on Investment

Coldstream Authored White Papers

The tradition of sharing information is as much a part of Information Security as keeping it from people. We offer a range of whitepapers, with the permission of their authors, for your interest.

• Tactical Management of Tiger Teams: a general discussion of how to organize and run an information security assessment team. (44k PDF file)
• Key-Dependent S-Box Manipulations: by Sandy Harris and Carlisle Adams. A method of enhancing the security of block ciphers which use s-boxes, including DES, CAST-128, and Blowfish. (249k PDF file)
• Sourcecode and comments: for a new experimental random number generator for use in cryptographic systems, by Sandy Harris. (48k PDF file)

the tradition of sharing information is part of Information Security

Return on Investment

Consider security spending a luxury? These documents can help you make a wise investment in computer security, and show that when you do, it's anything but.

• Snake Oil FAQ: a guide to careful shopping for cryptographic systems, reproduced with permission from Bruce Schneier of Counterpane Security. (48k PDF file)
• Finally, A Real Return on Security Spending, by Scott Berinato. CIO Magazine, Feb. 15, 2002.
• Demonstrating ROI for Penetration Testing (Four part article), by Marcia J. Wilson, CISSP. Security Focus, October 7, 2003.

these articles show how audits can offer excellent return on investment

Note: Some documents on this page are in the PDF format, and require the free Adobe Acrobat Reader to read.