Automated adaptive intrusion containment in systems of interacting services