Optimal Network Security Hardening Using Attack Graph Games