Leveraging large language models for SQL behavior-based database intrusion detection