Ahhh... some good reading is the "Know Your Enemy" Series :D

http://project.honeynet.org/papers/

hope this helps

Jack