Snort-2.1 Book Chapter Posted
25 May, 2006
Syngress Publishing has allowed me to post the chapter I wrote for the Snort 2.1 Intrusion Detection, Second Edition book entitled "Chapter 12; Active Response". This chapter explores the concept and implications of configuring IDS software to automatically respond to attacks in real time. A PDF version of this chapter can be downloaded here. The book has received positive reviews (including one by Richard Bejtlich of taosecurity.com) on amazon.com. Both psad and fwsnort are discussed within this chapter.