Loosely matching rhymes for intrusion detection