EAGER: Collaborative: Process-Based Technology to Support Comparison and Evaluation of the Security of Elections

这个项目探索了应用于选举的流程组成工具，特别集中在邮寄和互联网投票上。这包括探索如何从预先分析的过程组件组成系统，如何分析这些系统对攻击的脆弱性，以及如何确保得到的组合系统的重要安全属性得到确保。基本进程代表国家和地方选举的各个方面，它们的组成产生选举进程，对组成的分析可以洞察对选举的潜在错误或攻击。选举是人力密集型进程，直接让人类参与重要的决策和协调活动，包括与硬件和软件组件的交互。提供一种对人类参与进行形式推理的方法扩展了当前的安全工作。该项目还开拓了新的领域，探索了基于过程的建模和防御攻击的方法。该项目与国家和地方两级的政府机构密切合作，对结果进行深入、现实的评估。美国的选举官员可以直接利用这项工作的结果，随着新技术、法律和法规的实施，使美国的选举过程更加可靠、更简单、更容易改变。此外，该项目开发的技术可用于大多数具有严重安全问题的人力密集型流程。

This project explores process composition tools as applied to elections, concentrating particularly on mail-in and Internet voting. This includes exploration of how to compose systems from pre-analyzed process components, how to analyze the vulnerability of these systems to attacks, and how to guarantee that important security properties are ensured for the resulting composed system. The underlying processes represent aspects of national and local elections, their composition produces an election process, and analysis of the composition gives insight into potential errors or attacks on the election.Elections are human-intensive processes, processes that directly involve humans in important decision-making and coordination activities, including their interactions with hardware and software components. Providing an approach for formally reasoning about human participation extends current security work. The project also breaks new ground by exploring process-based approaches for modeling and defending against attacks.The project works closely with government agencies at both the national and local levels to provide in-depth realistic evaluation of results.Election officials in the U.S. can directly employ the results of this work to make U.S. election processes more verifiably secure, simpler, and easier to change as new technologies, laws, and regulations are imposed. Moreover the technologies developed in this project can be used in most human-intensive processes that have critical security concerns.