A (not) NICE way to verify the openflow switch specification: formal modelling of the openflow switch using alloy.

Natali Ruchansky, Davide Proserpio

Browse the full SIGCOMM paper archive.