OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archive: Re: Intrusion Detection book: good or bad?

Re: Intrusion Detection book: good or bad?


Israel Rosencrantz (israelpobox.com)
Thu, 03 Dec 1998 16:36:10 -0500


>|
http://www.amazon.com/exec/obidos/ASIN/0471290009/ref%3Dad%5Fgc1/002-5619081
-9644637
>
>The author clearly understands Intrusion Detection, and computer
>security at a fairly deep level. He may in places disagree with me
>(and thus be WRONG :), but he does not lack understanding.
>
>He tries to do an awful lot of things, which is a trap many authors
>fall into. So, what are you looking for in a book on Intrusion
>Detection?

Indeed the real question is what level do you seek? For the latest and
greatest
in techniques you will really only find that in research papers and talks.
If you
are looking for an overview that that book will work. For something that might
be a little more in depth you can also look at one that I like lately:

Intrusion Detection by Edward Amoroso.

http://www.amazon.com/exec/obidos/ASIN/0966670078/qid=912720632/sr=1-2/002-8
892539-7163658

Even though the bio on the author might make you think he has a position
and no knowledge, he does know his stuff.



This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:12:10 CDT