Engineering intrusion detection for two of the busiest transit hubs: why the crowd is the load test, the network is the security system, and end-to-end testing.