Called "the leader in the Snort IDS book arms race" by Richard Bejtlich, a top Amazon reviewer, this brand-new edition of the best-selling Snort book covers all the latest features of a major upgrade to the product and includes a bonus CD-ROM including Snort 2.1 and other utilities.
Stephen Northcutt, Director of Training and Certification, The SANS Institute, said "The authors of 'Snort 2.1 Intrusion Detection, Second Edition' have produced a book with a simple focus: to teach readers how to use Snort. From the basics of getting started to advanced rule configuration, they cover all aspects of using Snort, including basic installation, preprocessor configuration, and optimization of a Snort system. I am very thankful to have a front-row seat to watch the enormously talented security analysts of the Snort community continue to refine and improve the capability of the tools we use."
Chapter topics include: Intrusion Detection Systems, Introducing Snort 2.1, Installing Snort, Inner Workings, Playing by the Rules, Preprocessors, Implementing Snort Output Plug-Ins, Dealing with the Data, Keeping Everything Up to Date, Optimizing Snort, Mucking Around with Barnyard, Active Response, and Advanced Snort.
The CD-ROM contents include:
Snort 2.1.2 and ruleset
Offense Tools: Nmap, Nikto, Nessus, and Ettercap
Packet Analysis Tools: Ethereal and Tcpdump
ACID, Barnyard, and swatch Programs
Testing/Evasion Tools: Stick and Snot
Active Response Systems: Snortsam, Fwsnort, and Snort_inline
Snort 2.1 Intrusion Detection, Second Edition
PRICE: $49.95 U.S.
PAGE COUNT: 704 PP
About the Authors
Brian Caswell, snort.org webmaster, is a highly respected member of the Snort community and is the primary person responsible for maintaining the rules that drive the Snort intrusion detection system.
Jay Beale is Series Editor of the Jay Beale Open Source Security Series and lead developer of the Bastille project, which creates a hardening script for Linux, HP-UX, and Mac OS X.
Syngress Publishing (www.syngress.com), headquartered in Rockland, Massachusetts, is an independent publisher of print and electronic reference materials for Information Technology professionals seeking skill enhancement and career advancement. Distributed throughout Europe, Asia, the U.S. and Canada, Syngress titles have been translated into twenty languages. The company's pioneering customer support program, firstname.lastname@example.org, extends the value of every Syngress title with regular information updates and customer-driven author forums. For more information on Syngress products, contact Amy Pedersen at 781-681-5151 or email email@example.com. Syngress books are distributed in the United States and Canada by O'Reilly Media, Inc.