Managing Security with Snort & IDS Tools and over one million other books are available for Amazon Kindle. Learn more
CDN$ 26.30
  • List Price: CDN$ 57.95
  • You Save: CDN$ 31.65 (55%)
Temporarily out of stock.
Order now and we'll deliver when available. We'll e-mail you with an estimated delivery date as soon as we have more information. Your account will only be charged when we ship the item.
Ships from and sold by
Gift-wrap available.
Add to Cart
Have one to sell?
Flip to back Flip to front
Listen Playing... Paused   You're listening to a sample of the Audible audio edition.
Learn more
See this image

Managing Security with Snort & IDS Tools Paperback – Aug 12 2004

Amazon Price New from Used from
Kindle Edition
"Please retry"
"Please retry"
CDN$ 26.30
CDN$ 24.97 CDN$ 3.21

Join Amazon Student in Canada

Customers Who Bought This Item Also Bought


Product Details

Inside This Book (Learn More)
Browse Sample Pages
Front Cover | Copyright | Table of Contents | Excerpt | Index | Back Cover
Search inside this book:

Customer Reviews

There are no customer reviews yet on
5 star
4 star
3 star
2 star
1 star

Most Helpful Customer Reviews on (beta) 11 reviews
12 of 13 people found the following review helpful
One of the better discourses on Snort Dec 27 2004
By Harold McFarland - Published on
Format: Paperback
This is basically a book about intrusion detection using all open source tools. It starts with an introductory chapter that explains the problem of defining an intrusion and why it is becoming more and more of a problem. It follows up with a chapter on network traffic analysis including packet sniffing and using tcpdump and ethereal. Then comes the meat of the text - installing Snort. Of course to really understand how to use Snort you have to understand how attacks occur and the common methods used. The authors provide a really nice chapter on this subject. After that come five chapters on configuring, deploying, and managing Snort rules, intrusion prevention strategies, and tuning. Once Snort is up and running the authors examine the use of ACID and SnortCenter as Snort IDS management consoles. Either of these products drastically decreases the burden of analyzing what has happened and is happening on the intrusion detection forefront. The book ends with additional tools for Snort IDS management and implementation strategies for high-bandwidth situations.

There are other very good books on Snort but one of the things that makes this one particularly valuable is that it also looks at other open source tools and provides a good basic background on intrusion detection theory. Managing Security with Snort and IDS Tools is highly recommended for those in charge of intrusion detection and prevention in a network environment and planning to implement a system their self.
9 of 10 people found the following review helpful
Excellent description of Snort Oct. 9 2004
By Eric Wuehler - Published on
Format: Paperback
Up to this point, I've only use simple firewalls for my home network. Not that I think there's anything really worth hacking on my home network, but I thought I'd spend a little time learning about intrusion detection. This book is great for several reasons. First, it is well put together and easy to follow. Second, it describes in detail the open source project Snort. Finally, it satisfied my curiosity about IDS (Intrusion detection systems) - I'm not an expert, but I now understand the concepts.

Even though the book did not mention OS X specifically, it was easy to get snort compiled and installed on my Mac. There were a few tweaks I had to do, but if you're familiar with "configure; make; make install", it should be a snap. (Likewise, fink or darwinports can get you going with Snort as well). Any other flavor of Unix/Linux would be that much easier to install.

Beyond just describing how to install and configure Snort, the book does go into some detail about how networks are attacked and how Snort goes about alerting you to possible intrusive behavior. There are also numerous reference to web sites and other books to find more information. It also goes into detail on various other tools that augment and complement Snort.

Very well done.
3 of 3 people found the following review helpful
Snort made easy! March 9 2006
By Sean E. Connelly - Published on
Format: Paperback
O'Reilly's "Managing Security with Snort and IDS Tools" by Cox and Greg is a practical book that succinctly describes the basic functionality and utility of implanting Snort. The book does an excellent job at discussing the different configuration parameters when deploying Snort.

In particular, I was impressed by:

* Page 35 - A 5-page list detailing the different options available via the command-line.

* Page 69 - Details some of the techniques used to evade IDSs.

* Chapter 5's description of preprocessor configurations was a valuable tool to a newbie of UNIX.

* Chapter 10 description of ACID as a Snort IDS Management Console.

The only area I wish the authors expanded on was in Chapter 7 "Creating Your Own Rules". This area can easily be supplemented from documentation on the web.

The book has a natural bias toward elevating open source tools (I am fan of open source tools). Appreciating that fact, I must admit I have used this book when I have been describing the value of open source tools. Overall, I think "Managing Security with Snort and IDS Tools" is a valuable addition to anyone's Snort arsenal.

I give this book 4 pings out of 5:

Good book for understanding security on a Unix/Linux machine June 26 2013
By pgh-mike - Published on
Format: Paperback Verified Purchase
It was a good book for getting into security as it relates to Unix boxes. Since I'm switching careers into computer security this was a good book to refresh and explain Unix security tools.
Highly recommended Feb. 24 2012
By rpv - Published on
Format: Paperback Verified Purchase
snort is a intrusion prevention and detection system. This is a useful tool not only by sysadmins, but by individuals for protecting their systems and servers. You cannot go wrong with O Reilly books. They are written by subject matter experts and have detailed explanations. This book gives several command line examples and tutorials. Highly recommended.