A network security policy compiler