Policy-Based Security Configuration Management, Application to Intrusion Detection and Prevention