Written to be both a training aid and a technical reference for intrusion detection analysts, Northcutt's book contains unparalleled, practicalexperience that can't be found anywhere else. With detailed explanations and illustrative examples from his own career, Northcutt covers the topic completely, from detect evaluation, analysis, and situation handling, through the theories involved in understanding hackers, intelligence gathering, and coordinated attacks, to an arsenal of preventive and aggressive security measures. Ideal for the serious security analyst, Network Intrusion Detection: An Analyst's Handbook is the tool that puts you in full control of your network's security.
Ce livre est la 2ème édition du livre déjà lu (3ème édition).
J'étais intéressé surtout par les parties spécifiques aux IDS et à la corrélation. Les cas d'analyses sont très intéressants. Malheureusement, ça date.
Great book and a simple introduction to the field of Intrusion Detection. And although the book is kinda antiquated now, it still remains a quite relevant for beginners.