A Network Security Policy Compiler