Intrusion Detection Using Bloom and XOR Filters

Network-based Intrusion Detection System (NIDS) is one of the popular intrusion detection systems which is used to identify hostile activity on a network. NIDS can be implemented using IP lookup technique or content analysis technique. In this work, NIDS is implemented using the pattern-matching approach. Bloom filter is a space-efficient probabilistic data structure which tests if a particular content is the member in the set. In Bloom filter implementation, the amount of space utilized is more and the lookup speed is much lower than XOR filter. XOR filter is one of the most efficient pattern-matching approach which is used to detect the presence of the intruder in the network. This work implements NIDS using Bloom and XOR filters to obtain better accuracy and performance.