IDS/IPS Books

Content Leader: Jess Garcia - Last Updated: January 21, 2007

Guides

These are some of the most relevant IDS / IPS Guides:

• NIST SP 800-31
• NIST Draft SP 800-94

Books

The following is a list of the most relevant IDS / IPS books:

Highly Recommended

	TCP/IP Illustrated, Vol 1; The Protocols; W. Richard Stevens; Addison-Wesley Professional; 1ª edición, 31 Diciembre 1993.
	Network Intrusion Detection; Stephen Northcutt, Judy Novak ; Sams; 3ª edición, 25 Agosto 2002.
	Intrusion Signatures and Analysis; Mark Cooper, Stephen Northcutt, Matt Fearnow, Karen; Frederick ; Sams; 1ª edición, 29 Enero 2001.
	Extrusion Detection: Security Monitoring for Internal Intrusions; Richard Bejtlich; Addison-Wesley Professional; 8 Noviembre 2005.
	The Tao of Network Security Monitoring: Beyond Intrusion Detection; Addison-Wesley Professional; 12 Julio 2004.

Other

	Snort 2.1 Intrusion Detection; Jay Beale, Caswell; Syngress; 2ª edición, 1 Mayo 2004.
	Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks; Michal Zalewski; No Starch Press; 1ª edición., 15 Abril 2005.
	Intrusion Prevention and Active Response: Deploying Network and Host IPS; Syngress; 1ª edición, 15 Febrero 2005.
	Nessus, Snort, & Ethereal Power Tools: Customizing Open Source Security Applications; Brian Caswell, Gilbert Ramirez, Jay Beale, Noam Rathaus; Syngress; 19 Septiembre 2005.
	Implementing Intrusion Detection Systems; Tim Crothers ; Wiley ; 11 Diciembre 2002.
	Intrusion Detection; Rebecca Gurley Bace ;Sams; 1ª edición, 21 Deciembre 1999.
	Cisco Secure Intrusion Detection System (CSIDS); ; Earl Carter, Cisco Systems Inc; Cisco Press; 2ª edición 9 Febrero 2004.
	Cisco - Secure Intrusion Detection Systems; Michael Sweeney, C. Tate Baumrucker, James. D. Burton, Ido Dubrawsky; Syngress; 1ª edición, 1 Julio 2003.
	Intrusion Detection and Prevention; Michael Sweeney, C. Tate Baumrucker, James. D. Burton, Ido Dubrawsky; Syngress; 1ª Carl Endorf, Gene Schultz, Jim Mellande; Osborne/McGraw Hill; 1ª edición, 18 Diciembre 2003.
	Snort Cookbook; Angela Orebaugh, Simon Biles, Jacob Babbin; O'Reilly Media, Inc.; 29 Marzo 2005.
	Managing Security with Snort and IDS Tools; Christopher Gerg, Kerry J. Cox (Editor); O'Reilly Media, Inc.; 1 Agosto 2004.
	Cisco Security Agent; Chad Sullivan, Cisco Press, 1 Junio 2005.
	Ethereal Packet Sniffing; Angela D. Orebaugh, Gilbert Ramirez, Ethereal.com ; Syngress; 1ª edition,1 Febrero 2004)
	Practical Intrusion Detection Handbook; Paul E. Proctor ; Prentice Hall PTR; 1ª edición, 1 Agosto 2000.
	Intrusion Detection with SNORT: Advanced IDS Techniques Using SNORT, Apache, MySQL, PHP, and ACID; Rafeeq Rehman; Prentice Hall PTR; 1ª edición, 8 Mayo 2003.
	Intrusion Detection with Snort; Jack Koziol; Sams; 1ª edición, 30 Mayo 2003.
	Computer Intrusion Detection and Network Monitoring : A Statistical Viewpoint; David J. Marchette ; Springer; 1ª edición, 26 Junio 2001.
	Intrusion Detection in Distributed Systems; Peng Ning, Sushil Jajodia, Xiaoyang Sean Wang; Springer; 1ª edición, 31 Octubre 2003.
	Investigative Data Mining for Security and Criminal Detection; Peng Ning, Sushil Jajodia, Xiaoyang Sean Wang; Springer; 1ª edición, 31 Octubre Jesus Mena ; Butterworth-Heinemann; 31 Enero 2003.