Title :
Certifying spoofing-protection of firewalls
Author :
Cornelius Diekmann;Lukas Schwaighofer;Georg Carle
Author_Institution :
Technische Universit?t M?nchen
Abstract :
We present an algorithm to certify IP spoofing protection of firewall rulesets. The algorithm is machine-verifiably proven sound and its use is demonstrated in real-world scenarios.
Keywords :
"IP networks","Semantics","Firewalls (computing)","Data structures","Boolean functions","Linux","Kernel"
Conference_Titel :
Network and Service Management (CNSM), 2015 11th International Conference on
DOI :
10.1109/CNSM.2015.7367354
