Formal Verification of Condition Data Flow Diagrams for Assurance of Correct Network Protocols