Certifying Spoofing-Protection of Firewalls

This addresses security issues for network administrators by offering a verifiable method, but it appears incremental as it builds on existing firewall certification approaches.

The paper tackles the problem of certifying IP spoofing protection in firewall rulesets by presenting an algorithm that is machine-verifiably proven sound and demonstrated in real-world scenarios, though no concrete numbers are provided.