Firewall design: consistency, completeness, and compactness
BPF+: exploiting global data-flow optimization in a generalized packet filter architecture