Paul Innella wrote a good introductory article on intrusion detection systems that is in the SecurityFocus Basics focus area:
http://online.securityfocus.com/infocus/1520 . Stephen Entwisle Moderator, Security-Basics SecurityFocus http://www.securityfocus.com (403) 213 3939 ext. 235
