... Predicate relevant activity(org, a) where org is an organization and a an activity to define activities that are relevant in a given organization,(3) Predicate relevant view(org, v) where org is an ... specification long to properly generate fire-wall configuration rules. There are other attempts to suggest such a top-down approach. For instance, [Hassan and Hudec, 2003] applies the RBAC model[Sandhu ... languages.There are some tools that help administrators to build their security pol-icy and to translate it to the actual configuration language (for instance CiscoPIX [Degu and Bastien, 2003],...