Designing and Implementing Security Policies