Which type of network intrusion detection system uses defined rule sets to determine when attacks may be occurring?

Signature$-$based system

Rule$-$based system

Anomaly$-$based system

Filter$-$based system