Subverting Stateful Firewalls with Protocol States (Extended Version)

Amit Klein

We analyzed the generation of protocol header fields in the implementations of multiple TCP/IP network stacks and found new ways to leak information about global protocol states. W…