Feasibility study of botnet detection on encrypted data

We explore the feasibility of implementing anomaly based botnet detection on encrypted data to protect confidentiality of sensitive network data. We also provide experimental results on performance and storage of our SQL based implementation on network flow data. We analyze the workability of a secure encrypted database like CryptDB to build practical applications for intrusion detection use-cases.