Gravar-mail: Resilient Intrusion Tolerance through Proactive and Reactive Recovery