Formal verification of safety and performance properties of TCP selective acknowledgment | IEEE Conference Publication | IEEE Xplore