National Institutes of Standards and Technology: Karen Scarfone and Peter Mell's "Guide to Intrusion Detection and Prevention Systems"
Read from the beginning to the end of Chapter 3.
Click http://csrc.nist.gov/publications/nistpubs/800-94/SP800-94.pdf link to open resource.