Virtual organization security policies: An ontology-based integration approach