1. A method of network security administration comprising the steps of: by a computer system: (a) receiving a bit string that encodes a natural-language request for adjusting a security policy of a computer network; (b) parsing said bit string to identify: (i) at least one object, and (ii) an action to be applied to said at least one object; and (c) in response to said identifying of said at least one object, displaying a description of one of said at least one object.