Optimal security hardening using multi-objective optimization on attack tree models of networks