Towards network containment in malware analysis systems