Intrusion Detection System and Case Analysis

Author: Han Donghai
Publisher:
Publish Date: 2002-05-01
Features: This book is a comprehensive reference for intermediate and advanced readers, systematically introducing the theory and practical applications of intrusion detection systems. The book is divided into three main parts: Principles, Usage, and Analysis. The Principles section covers the fundamental concepts of intrusion detection, including the threats faced, classification methods, and key technologies. The Usage section selects the commonly used open-source systems Snort and AAFID, explaining their overall framework and main design philosophies. The Analysis section is the highlight of the book, providing a detailed dissection of the system's source code through specific application examples, with all source code fully open. This book helps computer network security professionals deepen their understanding of intrusion detection, accumulate relevant design and development experience, and is also highly beneficial for programmers to improve their coding skills. It serves as an excellent desk reference. Additionally, it is suitable for computer science instructors and advanced students at universities and colleges.