The article discusses how organizations can use simulation models to choose the best security policies for their computer networks. The researchers created a knowledge-based modeling and simulation environment where users can test different security mechanisms and policies to see how well they protect against cyber attacks. By implementing models based on a systematic approach, they were able to include knowledge in a modular way and provide clear guidelines for turning security policies into specific rules.