Intrusion Detection

by Rebecca Gurley Bace

With the number of intrusion and hacking incidents around the world on the rise, the importance of having dependable intrusion detection systems in place is greater than ever. Offering both a developmental and technical perspective on this crucial element of network security, Intrusion Detection practical considerations for selecting and implementing intrusion detection systems; methods of handling the results of analysis, and the options for responses to detected problems, data sources commonly used in intrusion detection and how they influence the capabilities of all intrusion detection systems; legal issues surrounding detection and monitoring that affect the design, development, and operation of intrusion detection systems. More than just an overview of the technology, Intrusion Detection presents real analysis schemes and responses, as well as a detailed discussion of the vulnerabilities inherent in many systems, and approaches to testing systems for these problems.

Genres: Technical

368 pages, Paperback

First published December 22, 1999

Reviews

[Nick Black · Rating 2 out of 5]

This was one of the most useless technical books I've ever read. There are no good books on IDS or its successors as of 2008; just go read the literature. This includes: early work out of the Air Force on Bro, Dorothy Denning's early papers, the glory days (Ptacek's "Insertion, Deletion and Denial of Service", polymorphic shellcode papers, signature autogeneration papers, infection model work -- much of these latter two emerging from our own GTISC (Georgia Tech Information Security Center)), basic systems knowledge, and automata theory all kinds. Have fun!

The lustrum (2000-2005) at Reflex Security absolutely redefining IDS/IPS (largely by myself; go go post-dotcom bubble startups!) was the great intellectual thrill of my life to date. Huzzah!