Re: Intrusion Detection book: good or bad?

[Israel Rosencrantz <israel () pobox com>]

> |
http://www.amazon.com/exec/obidos/ASIN/0471290009/ref%3Dad%5Fgc1/002-5619081
-9644637
> The author clearly understands Intrusion Detection, and computer
> security at a fairly deep level.  He may in places disagree with me
> (and thus be WRONG :), but he does not lack understanding.
>
> He tries to do an awful lot of things, which is a trap many authors
> fall into.  So, what are you looking for in a book on Intrusion
> Detection?

Indeed the real question is what level do you seek? For the latest and
greatest
in techniques you will really only find that in research papers and talks.
If you
are looking for an overview that that book will work. For something that might
be a little more in depth you can also look at one that I like lately:

Intrusion Detection by Edward Amoroso.

http://www.amazon.com/exec/obidos/ASIN/0966670078/qid=912720632/sr=1-2/002-8
892539-7163658

Even though the bio on the author might make you think he has a position
and no knowledge, he does know his stuff.