1. A processor-implemented method for controlling network traffic to and/or from at least one industrial machine, the method comprising: (a) the processor receiving, as input, (i) a stored policy object in language form defining at least one desired behavior and/or operational constraint for the at least one industrial machine, and (ii) a stored machine profile defining an association between the language of the stored policy object and at least one control signal or instruction for the at least one industrial machine; (b) the processor detecting, in network traffic to and/or from the at least one industrial machine, a transaction; (c) the processor applying the received policy object and machine profile to the detected transaction to determine whether a desired behavior exists and/or whether an operational constraint is satisfied; and (d) the processor modifying network traffic to and/or from the at least one industrial machine based on the determination in step (c).