Using Conservation of Flow as a Security Mechanism in Network Protocols. - John R. Hughes; Tuomas Aura; Matt Bishop (S&P, 2000)