Many intrusion detection books are long on theory but short on specifics and practical examples. Not Managing Security with Snort and IDS Tools. This new book is a thorough, exceptionally practical guide to managing network security using Snort 2.1 (the latest release) and dozens of other high-quality open source other open source intrusion detection programs. The book covers reliable methods for detecting network intruders, from using simple packet sniffers to more sophisticated IDS (Intrusion Detection Systems) applications and the GUI interfaces for managing them. A comprehensive but concise guide for monitoring illegal entry attempts, this invaluable new book provides step-by-step instructions to quickly get up and running with Snort, and how to shut down and secure workstations, servers, firewalls, routers, sensors and other network devices. Managing Security with Snort and IDS Tools maps out a proactive--and effective--approach to keeping your systems safe from attack.
1. Introduction
2. Network Traffic Analysis
3. Installing Snort
4. Know Your Enemy
5. The snort.conf File
6. Deploying Snort
7. Creating and Managing Snort Rules
8. Intrusion Prevention
9. Tuning and Thresholding
10. Using ACID as a Snort IDS Management Console
…etc…