EAGER: Collaborative: Process-Based Technology to Support Comparison and Evaluation of the Security of Elections

EAGER：协作：基于流程的技术支持选举安全性的比较和评估

• 批准号: 1258577
• 负责人: Matt Bishop
• 金额: $ 7.5万
• 依托单位: University of California-Davis
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-10-01 至 2014-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1258577&HistoricalAwards=false
• 关键词: EAGER; Collaborative; Process; Based; Technology

This project explores process composition tools as applied to elections, concentrating particularly on mail-in and Internet voting. This includes exploration of how to compose systems from pre-analyzed process components, how to analyze the vulnerability of these systems to attacks, and how to guarantee that important security properties are ensured for the resulting composed system. The underlying processes represent aspects of national and local elections, their composition produces an election process, and analysis of the composition gives insight into potential errors or attacks on the election.Elections are human-intensive processes, processes that directly involve humans in important decision-making and coordination activities, including their interactions with hardware and software components. Providing an approach for formally reasoning about human participation extends current security work. The project also breaks new ground by exploring process-based approaches for modeling and defending against attacks.The project works closely with government agencies at both the national and local levels to provide in-depth realistic evaluation of results.Election officials in the U.S. can directly employ the results of this work to make U.S. election processes more verifiably secure, simpler, and easier to change as new technologies, laws, and regulations are imposed. Moreover the technologies developed in this project can be used in most human-intensive processes that have critical security concerns.

这个项目探讨了适用于选举的流程组合工具，特别是集中在邮件和互联网投票。 这包括探索如何从预先分析的流程组件组成系统，如何分析这些系统的攻击漏洞，以及如何保证重要的安全属性得到保证的组合系统。 基本流程代表了国家和地方选举的各个方面，其组成产生了选举流程，对组成的分析可以洞察潜在的错误或对选举的攻击。选举是人力密集型流程，这些流程直接涉及人类的重要决策和协调活动，包括与硬件和软件组件的交互。提供一种方法，正式推理人类参与扩展目前的安全工作。该项目还通过探索基于流程的建模和防御攻击的方法开辟了新天地。该项目与国家和地方各级政府机构密切合作，对结果进行深入的现实评估。美国的选举官员可以直接使用这项工作的结果，使美国的选举流程更加安全，更简单，更容易改变，因为新技术，法律，并实施了规定。 此外，该项目开发的技术可用于大多数具有关键安全问题的人力密集型流程。