Model-based management of security services in complex network environments