Improving the accuracy of network intrusion detection systems under load using selective packet discarding