Me and a friend think to create a small IDS (university's exercise).

We will start with some tcp/ip books. But atm we are searching for some info about ids. Anyone know any good references (books) on howto create an ids? (not configuring snort)

Your forum is really nice ,very usefull
thx
[i hope this is the correct forum and not "IDS & Scanner Discussions"]