Which of the following could be a measure used for intrusion detection?