Snort 2.0 Intrusion Detection

by Brian Caswell, James C. Foster, Jay Beale

Why spend tens of thousands on an Intrusion Detection System? Snort is a powerful Network Intrusion Detection System that can provide enterprise wide sensors to protect your computer assets from both internal and external attack. Snort can put the information you need at your fingertips about any suspicious activity on your network. Snort is a lightweight network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.

The incredible low maintenance costs of Snort combined with it's powerful security features are making Snort one of the fastest growing IDSs within corporate IT departments.

550 pages, Paperback

First published January 1, 2003

About the author

Brian Caswell is a member of the Snort core team, where he is the primary author for the world's most widely used intrusion detection rulesets. He is a member of the Shmoo group, an international not-for-profit, non-milindustrial independent private think tank. He is a technical editor of Snort 2.0 Intrusion Detection (Syngress, ISBN: 1931836744). Currently, Brian is a Research Engineer within the Vulnerability Research Team for Sourcefire, a provider of one of the world's most advanced and flexible Intrusion Management solutions. Before Sourcefire, Brian was the IDS team leader and all around supergeek for MITRE, a government sponsored think tank.