National Institutes of Standards and Technology: Karen Scarfone's and Peter Mell's "Guide to Intrusion Detection and Prevention Systems"
Read chapters 4, 5, and 6.
Click http://csrc.nist.gov/publications/nistpubs/800-94/SP800-94.pdf link to open resource.