Quantitative Framework to Design Services with Intrusion Tolerant QoS