Compiling NATO authorization policies for enforcement in the cloud and SDNs

NATO has developed a Content-based Protection and Release model to support the specification of access control policies. Enforcing such policies in different scenarios is a complex task that requires consideration of several aspects, including performance and administrative burden. We sketch a solution to this problem for the Cloud and Software Defined Networks.