A Policy-Based Management Framework for Cloud Computing Security