Optimization research on rule list in network intrusion detection system