Network Intrusion Detection: An Analyst Guide (1st, 2nd and 3rd Editions -- read 'em and have 'em all). ;)