Modelling and Verification of Secure Exams

by Rosario Giustolisi

Overview

In this book the author introduces a novel approach to securing exam systems. He provides an in-depth understanding, useful for studying the security of exams and similar systems, such as public tenders, personnel selections, project reviews, and conference management systems.

After a short chapter that explains the context and objectives of the book, in Chap. 2 the author introduces terminology for exams and the foundations required to formulate their security requirements. He describes the tasks that occur during an exam, taking account of the levels of detail and abstraction of an exam specification and the threats that arise out of the different exam roles. He also presents a taxonomy that classifies exams by types and categories. Chapter 3 contains formal definitions of the authentication, privacy, and verifiability requirements for exams, a framework based on the applied pi-calculus for the specification of authentication and privacy, and a more abstract approach based on set-theory that enables the specification of verifiability. Chapter 4 describes the Huszti-Pethő prool in detail and proposes a security enhancement. In Chap. 5 the author details Remark!, a prool for Internet-based exams, discussing its cryptographic building blocks and some security considerations. Chapter 6 focuses on WATA, a family of computer-assisted exams that employ computer assistance while keeping face-to-face testing. The chapter also introduces formal definitions of accountability requirements and details the analysis of a WATA prool against such definitions. In Chaps. 4, 5, and 6 the author uses the cryptographic prool verifier ProVerif for the formal analyses. Finally, the author outlines future work in Chap. 7.

The book is valuable for researchers and graduate students in the areas of information security, in particular for people engaged with exams or prools.

Product Details

ISBN-13:	9783030097899
Publisher:	Springer International Publishing
Publication date:	01/03/2019
Series:	Information Security and Cryptography
Edition description:	Softcover reprint of the original 1st ed. 2018
Pages:	133
Product dimensions:	6.10(w) x 9.25(h) x (d)

About the Author

Rosario Giustolisi is an assistant professor at the IT University of Copenhagen. He received his PhD from the University of Luxembourg where he worked on a formal framework for the security analysis of exam prools and on the design of prools for computer-assisted and Internet-based exams. As a postdoc at SICS RISE and a member of the Security Lab in Lund, he investigated group-based authentication mechanisms for future 5G networks. His research interests include the modeling and formal analysis of secure network prools and the sociotechnical security aspects of real-world systems.

Table of Contents

Introduction.- Preliminaries and Definitions.- Security Requirements.- The Huszti-Pethő Prool.- The Remark! Internet-Based Exam.- The WATA Family.- Conclusions.

Editorial Reviews

This book might be of interest to everyone who wants to learn more about the nature of exams in general, and in particular about how to model and verify them. … The book provides a good overview of key elements of various types of exams and their corresponding security requirements, leading to a better understanding of exam prools in general … . The description of the individual exam prools is very detailed and easy to follow.” (Diego Marmsoler, fmeurope.org, October 29, 2021)

From the Publisher