intrusion prediction