Designing voting machines for verification

15th USENIX Security Symposium

Volumn , Issue , 2006, Pages 321-336

  Sastry, Naveen ^a   Kohno, Tadayoshi ^a   Wagner, David ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

SYSTEMS ANALYSIS; VOTING MACHINES;

ARCHITECTURAL DECISION; BUILDING A PROTOTYPES; DIRECT RECORDING ELECTRONICS; OTHER PROPERTIES; SECURITY PROPERTIES; SPECIFIC HARDWARE; TESTING AGENCY; VOTING SYSTEMS;

ELECTRONIC VOTING;

EID: 84926201668     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (41)

1. Auditability and voter-verifiability for electronic voting terminals. http://www.scytl.com/docs/pub/a/PNYX.DRE-WP.pdf, December 2004. White paper.
2. M. Anderson, C. North, J. Griffin, R. Milner, J. Yesberg, and K. Yiu. Starlight: Interactive Link. In Proceedings of the 12th Annual Computer Security Applications Conference (ACSAC), 1996.
3. J. Bannet, D. W. Price, A. Rudys, J. Singer, and D. S. Wallach. Hack-a-vote: Demonstrating security issues with electronic voting systems. IEEE Security and Privacy Magazine, 2(1):32–37, Jan./Feb. 2004.
4. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In Proceedings of the 19th ACM Symposium on Operating Sstems Principles (SOSP 2003), October 2003.
5. M. Barnett, K. R. Leino, and W. Schulte. The Spec# programming system: An overview. In Proceedings of Construction and Analysis of Safe, Secure and Interoperable Smart Devices (CASSIS), 2004.
6. S. Bruck, D. Jefferson, and R. Rivest. A modular voting architecture (“Frogs”). http://www.vote.caltech.edu/media/documents/wps/vtp_wp3.pdf, August 2001. Voting Technology Project Working Paper.
7. E. Bugnion, S. Devine, and M. Rosenblum. Disco: Running commodity operating systems on scalable multiprocessors. In Proceedings of the 16th ACM Symposium on Operating Systems Principles (SOSP), October 1997.
8. L. Burdy, Y. Cheon, D. Cok, M. Ernst, J. Kiniry, G. Leavens, K. R. Leino, and E. Poll. An overview of JML tools and applications. International Journal on Software Tools for Technology Transfer (STTT), 7(3):212–232, June 2005.
9. G. Candea, S. Kawamoto, Y. Fujiki, G. Friedman, and A. Fox. Microreboot – a technique for cheap recovery. In 6th Symposium on Operating System Design and Implementation (OSDI), December 2004.
10. D. Chaum. Secret-ballot receipts: True voter-verifiable elections. IEEE Security & Privacy Magazine, 2(1):38–47, Jan.–Feb. 2004.
11. D. Engler, M. F. Kaashoek, and J. O’Toole. Exokernel: An operating system architecture for application-level resource management. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP), October 1995.
12. I. Goldberg, D. Wagner, R. Thomas, and E. Brewer. A secure environment for untrusted helper applications: Confining the wily hacker. In Proceedings of the 6th USENIX Security Symposium, August 1996.
13. J. Hall. Transparency and access to source code in e-voting. Unpublished manuscript.
14. G. Heiser. Secure embedded systems need microkernels. USENIX;login, 30(6):9–13, December 2005.
15. Y. Huang, C. Kintala, N. Kolettis, and N. D. Fulton. Software rejuvenation: Analysis, module and applications. In Twenty-Fifth International Symposium on Fault-Tolerant Computing, 1995.
16. C. Karlof, N. Sastry, and D. Wagner. Cryptographic voting protocols: A systems perspective. In Fourteenth USENIX Security Symposium, August 2005.
17. T. Kohno, A. Stubblefield, A. D. Rubin, and D. S. Wallach. Analysis of an electronic voting system. In IEEE Symposium on Security and Privacy, pages 27–40, May 2004.
18. M. Kuhn. Optical time-domain eavesdropping risks of CRT displays. In IEEE Symposium on Security and Privacy, May 2002.
19. G. Leavens and Y. Cheon. Design by contract with JML. ftp://ftp.cs.iastate.edu/pub/leavens/JML/jmldbc.pdf.
20. J. Liedtke. Toward real microkernels. Communications of the ACM, 39(9):70, September 1996.
21. D. McCullough. Noninterference and the composability of security properties. In IEEE Symposium on Security and Privacy, May 1988.
22. R. Mercuri. Electronic Vote Tabulation Checks & Balances. PhD thesis, School of Engineering and Applied Science of the University of Pennsylvania, 2000.
23. R. Mercuri. A better ballot box? IEEE Spectrum, 39(10):46–50, October 2002.
24. D. Mertz. XML Matters: Practical XML data design and manipulation for voting systems. http://www-128.ibm.com/developerworks/xml/library/x-matters36.html, June 2004.
25. D. Molnar, T. Kohno, N. Sastry, and D. Wagner. Tamper-evident, history-independent, subliminal-free data structures on PROM storage -or- How to store ballots on a voting machine (extended abstract). In IEEE Symposium on Security and Privacy, May 2006.
26. C. A. Neff. A verifiable secret shuffle and its application to e-voting. In 8th ACM Conference on Computer and Communications Security (CCS 2001), pages 116–125, November 2001.
27. C. A. Neff. Practical high certainty intent verification for encrypted votes. http://www.votehere.net/vhti/documentation, October 2004.
28. N. Provos, M. Friedl, and P. Honeyman. Preventing privilege escalation. In Proceedings of the 12th USENIX Security Symposium, August 2003.
29. RABA Innovative Solution Cell. Trusted agent report Diebold AccuVote-TS voting system, January 2004.
30. M. Rajagopalan, S. Debray, M. Hiltunen, and R. Schlichting. Automated operating system specialization via binary rewriting. Technical Report TR05-03, University of Arizona, February 2005.
31. R. Rashid Jr., A. Tevanian, M. Young, M. Young, D. Golub, R. Baron, D. Black, W. Bolosky, and J. Chew. Machine-independent virtual memory management for paged uniprocessor and multiprocessor architectures. In Proceedings of the 2nd Symposium on Architectural Support for Programming Languages and Operating Systems (ASPLOS), October 1987.
32. J. Rushby. Design and verification of secure systems. In Proceedings of the 8th ACM Symposium on Operating Systems Principles (SOSP), December 1981.
33. Science Applications International Corporation (SAIC). Risk assessment report Diebold AccuVote-TS voting system and processes, September 2003.
34. A. Seshadri, A. Perrig, L. van Doorn, and P. Khosla. SWAtt: Software-based attestation for embedded devices. In Proceedings of the IEEE Symposium on Security and Privacy, May 2004.
35. M. Swift, M. Annamalai, B. Bershad, and H. Levy. Recovering device drivers. In Proceedings of the 6th ACM/USENIX Symposium on Operating System Design and Implementation, December 2004.
36. M. Swift, B. Bershad, and H. Levy. Improving the reliability of commodity operating systems. In Proceedings of the 19th ACM Symposium on Operating Sstems Principles (SOSP 2003), October 2003.
37. W. van Eck. Electromagnetic radiation from video display units: An eavesdropping risk? Computers & Security, 4, 1985.
38. D. Wagner, D. Jefferson, M. Bishop, C. Karlof, and N. Sastry. Security analysis of the Diebold AccuBasic interpreter. California Secretary of State’s Voting Systems Technology Assessment Advisory Board (VSTAAB), February 2006.
39. C. Weissman. MLS-PCA: A high assurance security architecture for future avionics. In Proceedings of the 19th Annual Computer Security Applications Conference (ACSAC 2003), 2003.
40. A. Whitaker, M. Shaw, and S. Gribble. Denali: A scalable isolation kernel. In 10th ACM SIGOPS European Workship, September 2002.
41. I.-L. Yen and R. Paul. Key applications for high-assurance systems. IEEE Computer, 31(4):35–45, April 1998.