paper

Certifying Spoofing-Protection of Firewalls

arXiv:1603.07538 · doi:10.1109/CNSM.2015.7367354

Abstract

We present an algorithm to certify IP spoofing protection of firewall rulesets. The algorithm is machine-verifiably proven sound and its use is demonstrated in real-world scenarios.

11th International Conference on Network and Service Management, CNSM, Barcelona, Spain, November 2015