Book: The Tao of Network Security Monitoring. Beyond Intrusion Detection
24 Apr 2008
Author: Richard Bejtlich
Editor: Addison-Wesley
Publication: 07/12/2004
Pages: 298 - 315 (Chapter 9: Alert Data: Bro and Prelude > Prelude)
Read the book review at LinuxSecurity.com