Cornelius Diekmann, Lukas Schwaighofer, Georg Carle·2016-03-24·via cs.CR updates on arXiv.org
We present an algorithm to certify IP spoofing protection of firewall rulesets. The algorithm is machine-verifiably proven sound and its use is demonstrated in real-world scenarios.