Network Intrusion Detection: Analyze, Discover, and Report Attacks: Analyze, Discover, and Report Attacks

Author: Song Jinsong
Publisher:
Publish Date: 2004-09-01
Features: This book can serve as a reference for network administrators, individuals interested in network security products and technology, network security developers, and experts. It can also be used as a teaching reference for senior undergraduate and graduate students in relevant fields at universities. The book introduces all aspects of intrusion detection products and technology in a comprehensive and progressive manner. The entire book is divided into 16 chapters, organized into four parts.
Part I, consisting of Chapters 1 to 3, introduces the concept of intrusion detection, selection, and usage. Through this part, readers can understand the current state of intrusion detection products and become mature users.
Part II, Chapters 4 to 8, provides an in-depth introduction to the configuration, usage, and maintenance of an open-source intrusion detection system (IDS) called Snort, helping readers interested in IDS technology understand its principles.
Part III, Chapters 9 to 13, analyzes the code implementation of Snort, dissecting IDS technology at the code level, making it suitable for IDS developers and professionals who wish to gain a deeper understanding of IDS technology.
Part IV, Chapters 14 to 16, analyzes the weaknesses of IDS and systematically discusses its testing and development trends. Hot topics for individuals with some background in IDS, such as IDS deception, IDS testing, and the future of IDS, are covered in dedicated chapters with in-depth discussions.