A model of stateful firewalls and its properties
Firewall design: consistency, completeness, and compactness