Network-versus host-based intrusion detection