In the academic world, there are countless examples of policy-based security management work, but given the ever-increasing difficulty of maintaining and managing a secure network, this topic remains very current. Policy-based management is an approach that allows simpler and more effective management of distributed networks and systems by deploying a set of policies to control network behaviour. A good policy refinement job needs to be carried out to ensure that the policy-based management approach can be truly effective. Policy refinement is the process of transforming a high-level abstract policy specification into low-level, concrete policies that can be enforced on the managed system.