National Institutes of Standards and Technology: Karen Scarfone and Peter Mell's "Guide to Intrusion Detection and Prevention Systems"

Read from the beginning to the end of Chapter 3.