RE: Can anyone recommend a good book?

["Bohling James CONT JBC" <james.bohling () JBC JFCOM MIL>]

Although not a comprehensive IDS book, it is written very well about a
particular IDS.  The Snort 2.0 by Syngress book is very good.  Being
open source, it will also allow the student to delve into the code that
you won't find in proprietary IDS.  It also provides instruction on how
to load different analysis interfaces providing a different aspects
into: Post analysis, Real Time Analysis, Forensic Database, etc.  Check
it out I enjoyed it.  Also it gives an opportunity to explore the Linux
and windows world and lets the student determine which platform he/she
prefers in different situations or architectures.  I can go on and on,
check it out.


Thank You,
James T. Bohling, CCNA, Security+, MCP-Win2k
Network Security Engineer - JBC CoE
Joint C4ISR Battle Center (AMSEC)
116 Lake View Parkway
Suffolk, VA 23435
(W) 757-638.4032
Web: www.jbc.jfcom.mil
This email was produced and manufactured in America, and is a
one-of-a-kind original.




-----Original Message-----
From: David J. Jackson [mailto:djackson () netdmz com] 
Sent: Tuesday, November 04, 2003 1:06 PM
To: focus-ids () securityfocus com
Subject: Can anyone recommend a good book?


I'm looking for a book on IDS.  One that is at a beginner to
intermediate level.  This is to be used as training material in a
classroom environment so a book that is put together in a way that it
could easily be adapted to a classroom learning environment would be
great.  Lastly, a book that has hands-on structured labs on using IDS
tools and implementing IDS solutions.
 
Does such a book exist?
 
Thanks,
David Jackson, GSEC

---------------------------------------------------------------------------
Network with over 10,000 of the brightest minds in information security
at the largest, most highly-anticipated industry event of the year.
Don't miss RSA Conference 2004! Choose from over 200 class sessions and
see demos from more than 250 industry vendors. If your job touches
security, you need to be here. Learn more or register at
http://www.securityfocus.com/sponsor/RSA_focus-ids_031023
and use priority code SF4.
---------------------------------------------------------------------------