Certifying Spoofing-Protection of Firewalls
  We present an algorithm to certify IP spoofing protection of firewall rulesets. The algorithm is machine-verifiably proven sound and its use is demonstrated in real-world scenarios. 
Cornelius Diekmann, Lukas Schwaighofer, Georg Carle
cs.CR cs.NI