A formal approach for network security policy validation