On the difficulty of validating voting machine software with software

EVT 2007 - 2007 USENIX/ACCURATE Electronic Voting Technology Workshop

Volumn , Issue , 2007, Pages

  Gardner, Ryan ^a   Garera, Sujata ^a   Rubin, Aviel D ^a  

^a JOHNS HOPKINS UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

VERIFICATION; VOTING MACHINES;

BOOT LOADERS; DESIGN AND IMPLEMENTS; DIEBOLD; MACHINE SOFTWARE; STATE OF THE ART; TECHNOLOGY ADVANCES; VERIFICATION OF SOFTWARES;

ELECTRONIC VOTING;

EID: 85092092579     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. Grub: The grand unified bootloader. http://www.gnu.org/software/grub/.
2. The national software reference library. http://www.nsrl.nist.gov/vote.html.
3. Physical memory layout of the PC. http://my.execpc.com/~geezer/osd/ram/index.htm.
4. Advanced Micro Devices. AMD64 Architecture Programmer's Manual, volume 2: System Programming. September 2006.
5. W. A. Arbaugh, D. J. Farber, and J. M. Smith. A secure and reliable bootstrap architecture. In IEEE Symposium on Security and Privacy, 1997.
6. S. Bruck, D. Jefferson, and R. L. Rivest. A modular voting architecture (“frogs”). In Workshop on Trustworthy Elections, 2001.
7. A. Carroll, M. Juarez, J. Polk, and T. Leininger. Microsoft palladium: A business overview, August 2002.
8. B. Chen and R. Morris. Certifying program execution with secure processors. In USENIX HotOS Workshop, 2003.
9. B. Eakin, B. Smith, and D. Wallach. Code verification for electronic voting machines. Rice University, comp527. https://sys.cs.rice.edu/course/comp527/PioneerVotingProjectProposal, Fall 2006.
10. P. England, B. Lampson, J. Manferdelli, M. Peinado, and B. Willman. A trusted open platform. IEEE Spectrum, 36(7):55-62, 2003.
11. P. England and M. Peinado. Authenticated operation of open computing devices. In ACISP'02: Australian Conference on Information Security and Privacy, 2002.
12. J. Franklin, M. Luk, A. Seshadri, and A. Perrig. Securely using untrusted terminals and compromised machines with human-verifiable code execution. http://www.cs.cmu.edu/~jfrankli/talks/ human-verifiable-code-execution_s% tanford.ppt.
13. J. A. Garay and L. Huelsbergen. Software integrity protection using timed executable agents. In ASIACCS'06: ACM Symposium on Information, Computer, and Communications Security, 2006.
14. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: a virtual machine-based platform for trusted computing. In ACM Symposium on Operating Systems Principles, 2003.
15. M. Gasser, A. Goldstein, C. Kaufman, and B. Lampson. The digital distributed system security architecture. In NIST/NCSC National Computer Security Conference, 1989.
16. B. Harris. Black Box Voting: Vote Tampering in the 21st Century. Elon House/Plan Nine, July 2003.
17. Intel Corporation. Intel 64 and IA-32 Architectures Optimization Reference Manual. November 2006.
18. Intel Corporation. Intel 64 and IA-32 Architectures Sofware Developer's Manual, volume 2B: Instruction Set Reference, N-Z. November 2006.
19. Intel Corporation. Intel trusted execution technology - preliminary architecture specification, November 2006.
20. R. Kennell and L. H. Jamieson. Establishing the genuity of remote computer systems. In USENIX Security Symposium, 2003.
21. T. Kohno, A. Stubblefield, A. D. Rubin, and D. S. Wallach. Analysis of an electronic voting system. In IEEE Symposium on Security and Privacy, 2004.
22. J. Nick L. Petroni, T. Fraser, J. Molina, and W. A. Arbaugh. Copilot - a coprocessor-based kernel runtime integrity monitor. In USENIX Security Symposium, 2004.
23. R. L. Rivest. The RC4 encryption algorithm, 1992. RSA Data Security Inc.
24. R. Sailer, T. Jaeger, X. Zhang, and L. van Doorn. Attestation-based policy enforcement for remote access. In CCS'04: ACM Conference on Computer and Communications Security, 2004.
25. N. Sastry, T. Kohno, and D. Wagner. Designing voting machines for verification. In USENIX Security Symposium, 2006.
26. A. Seshadri, M. Luk, E. Shi, A. Perrig, L. van Doorn, and P. Khosla. Pioneer: Verifying code integrity and enforcing untampered code execution on legacy systems. In SOSP'05: ACM Symposium on Operating Systems Principles, 2005.
27. A. Seshadri, M. Luk, E. Shi, A. Perrig, L. van Doorn, and P. Khosla. Pioneer: Verifying code integrity and enforcing untampered code execution on legacy systems - codebase, 2005. http://www.cs.cmu.edu/~arvinds/pioneer.html.
28. A. Seshadri, A. Perrig, L. van Doorn, and P. Khosla. SWATT: Sofware-based attestation for embedded devices. In IEEE Symposium on Security and Privacy, 2004.
29. U. Shankar, M. Chew, and J. D. Tygar. Side effects are not sufficient to authenticate software. In USENIX Security Symposium, 2004.
30. E. Shi, A. Perrig, and L. van Doorn. Bind: A fine-grained attestation service for secure distributed systems. In IEEE Symposium on Security and Privacy, 2005.
31. P. S. Tasker. Trusted computer systems. In IEEE Symposium on Security and Privacy, 1981.
32. Trusted Computing Group. TPM main part 1 - design principles, specification version 1.2, revision 94, March 2006.
33. J. D. Tygar and B. Yee. Dyad: A system for using physically secure coprocessors. In IP Workshop Proceedings, 1994.
34. B. Yee and J. D. Tygar. Secure coprocessors in electronic commerce applications. In USENIX Workshop on Electronic Commerce, 1995.
35. K.-P. Yee, D. Wagner, M. Hearst, and S. M. Bellovin. Prerendered user interfaces for higher-assurance electronic voting. In USENIX/ACCURATE Electronic Voting Technology Workshop, 2006.