

Denning, Dorothy. “An Intrusion Detection Model.” IEEE Transactions on Software Engineering, Vol. SE-13 NO. 2, Feb 1987, pp. 222-223
http://www.cs.georgetown.edu/~denning/infosec/ids-model.rtf
Heberlein, T. et al. "A Network Security Monitor." Proceedings of the IEEE Computer Society Symposium, Research in Security and Privacy, May 1990, pp. 296-303.
http://seclab.cs.ucdavis.edu/papers/pdfs/th-gd-90.pdf
Netranger – First commercial IDS formed from __ group.
Snort – Open Source IDS
Other References:
“An Introduction to Intrusion Detection”:
http://www.icsalabs.com/icsa/docs/html/communities/ids/whitepaper/Intrusion1.pdf
Navy Information Assurance Website https://infosec.navy.mil/infosecprodsservices/bc_ids.html