Amazon.com just posted my three-star review of Intrusion Detection and Prevention. I took exception to some of the authors’ conclusions. A cheap shot on page 187 shows the ISS chapter author doesn’t understand what real analysts need to “trust” their IDS. Analyst trust is built on transparency and validation, meaning he can see why the product generated an alert, and use additional data to confirm its validity. Snort and NFR offer this; ISS does not. Furthermore, if you don’t like how Snort works, you can modify the source code.”]
Source: https://taosecurity.blogspot.com/2004/01/amazon-posts-review-of-intrusion.html