Intrusion detection is not intrusion prevention