3.0 out of 5 stars
Decent companion to Network Intrusion Detection, 2nd Ed., Feb. 5 2001
"Intrusion Signatures and Analysis" is a handy companion volume to "Network Intrusion Detection, 2nd Ed." that gives the reader many more examples of intrusion attempts and scans across a wide variety of network devices that a real-world analyst will be required to use, and gives the reader access to more real-world events to learn from before they encounter them on their own networks.
This book also serves well as a style guide for writing up incidents in your organization, or to submit to an incident response center.