Литература
M. Roesch. Snort - lightweight intrusion detection for networks//Proceedings of LISA99, the 13th Systems Administration Conference. - 1999
M. Handley, V. Paxson. Network Intrusion Detection: Evasion Traffic Normalization And End-to-End Protocol Semantics//Proceedings of the 10th USENIX Security Symposium. - 2001.
T.H.Ptacek, T.N. Newsham. Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection//Secure Networks, Inc. - 1998.