Intrusion detection in network security