Game-theoretic intrusion response and recovery