User-oriented Network Security Policy Specification