slides/slides02.tex
author Christian Urban <christian dot urban at kcl dot ac dot uk>
Tue, 30 Sep 2014 02:22:16 +0100
changeset 187 0379bd6f3d21
parent 186 f7aa15984301
child 188 2555552d2c05
permissions -rw-r--r--
updated
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     1
\documentclass[dvipsnames,14pt,t]{beamer}
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
     2
\usepackage{../slides}
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
     3
\usepackage{../graphics}
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
     4
\usepackage{../langs}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     5
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
     6
\setmonofont[Scale=.88]{Consolas}
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
     7
\newfontfamily{\consolas}{Consolas}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     8
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
     9
\hfuzz=220pt 
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    10
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    11
% beamer stuff 
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
    12
\renewcommand{\slidecaption}{APP 02, King's College London}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    13
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    14
%Bank vs Voting
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    15
%http://www.parliament.vic.gov.au/images/stories/committees/emc/2010_Election/submissions/13_VTeague_EMC_Inquiry_No.6.pdf
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    16
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    17
% first cyber attack
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    18
%http://investigations.nbcnews.com/_news/2013/03/18/17314818-cyberattack-on-florida-election-is-first-known-case-in-us-experts-say
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    19
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    20
\begin{document}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    21
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    22
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
    23
\begin{frame}[t]
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    24
\frametitle{%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    25
  \begin{tabular}{@ {}c@ {}}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    26
  \\
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    27
  \LARGE Access Control and \\[-3mm] 
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    28
  \LARGE Privacy Policies (2)\\[-6mm] 
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    29
  \end{tabular}}\bigskip\bigskip\bigskip
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    30
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    31
\normalsize
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    32
  \begin{center}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    33
  \begin{tabular}{ll}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    34
  Email:  & christian.urban at kcl.ac.uk\\
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    35
  Office: & S1.27 (1st floor Strand Building)\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    36
  Slides: & KEATS (also homework is there)\\
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    37
  \end{tabular}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    38
  \end{center}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    39
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
    40
\end{frame}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    41
 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%     
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    42
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    43
20
Christian Urban <urbanc@in.tum.de>
parents: 19
diff changeset
    44
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <urbanc@in.tum.de>
parents: 19
diff changeset
    45
\begin{frame}[c]
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    46
\frametitle{\begin{tabular}{c}This Course is about\\[-2mm]  ``Satan's Computer''\end{tabular}}
20
Christian Urban <urbanc@in.tum.de>
parents: 19
diff changeset
    47
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    48
Ross Anderson and Roger Needham wrote:\bigskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    49
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
    50
\begin{bubble}[10cm]
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
    51
\small
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    52
``In effect, our task is to program a computer which gives 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    53
answers which are subtly and maliciously wrong at the most 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    54
inconvenient possible moment\ldots{} we hope that the lessons 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    55
learned from programming Satan's computer may be helpful 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    56
in tackling the more common problem of programming Murphy's.''
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
    57
\end{bubble}\\[30mm]
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    58
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    59
\only<2>{
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    60
\begin{textblock}{11}(3.5,12)
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    61
\begin{tabular}{c}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    62
\includegraphics[scale=0.12]{pics/ariane.jpg}\\[-2mm]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    63
\footnotesize Murphy's computer
20
Christian Urban <urbanc@in.tum.de>
parents: 19
diff changeset
    64
\end{tabular}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    65
\begin{tabular}{c}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    66
\includegraphics[scale=0.15]{pics/mobile.jpg}\;
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    67
\includegraphics[scale=0.06]{pics/pinsentry.jpg}\\[-2mm]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    68
\footnotesize Satan's computers
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    69
\end{tabular}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
    70
\end{textblock}}
20
Christian Urban <urbanc@in.tum.de>
parents: 19
diff changeset
    71
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
    72
\end{frame}
20
Christian Urban <urbanc@in.tum.de>
parents: 19
diff changeset
    73
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <urbanc@in.tum.de>
parents: 19
diff changeset
    74
186
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    75
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    76
\begin{frame}[c]
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    77
\frametitle{Defence in Depth}
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    78
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    79
\begin{center}\small
186
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    80
\pcode{urbanc:$6$3WWbKfr1$4vblknvGr6FcDeF92R5xFn3mskfdnEn...:...}
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    81
\end{center}
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    82
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    83
\begin{itemize}
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    84
\item hashes help when password databases are leaked
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
    85
\item salts help with protecting against dictionary attacks
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    86
  and help people who have the same password on different sites\medskip
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    87
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    88
\item but they do not protect against a focused attack against a single 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    89
  password and also do not make poorly chosen passwords any better
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    90
\end{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    91
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    92
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    93
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    94
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    95
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    96
\begin{frame}[c]
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    97
\frametitle{Subtle Points}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    98
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
    99
\begin{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   100
\item in our web-application the salt needed to remain secret;
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   101
  in password files the salt is public\bigskip
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   102
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   103
\item the NYT has the ``resource'' unlocked at first
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   104
  and locks it depending on the cookie data
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   105
\item our ``web-application'' has the resource locked at first,
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   106
  and unlocks it depending on the cookie data
186
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
   107
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
   108
\end{itemize}
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
   109
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
   110
\end{frame}
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
   111
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
f7aa15984301 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 185
diff changeset
   112
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   113
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   114
\begin{frame}[t]
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   115
\frametitle{How to Salt?}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   116
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   117
\begin{center}\tt\small
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   118
\begin{tabular}{lcl}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   119
1salt & $\Rightarrow$ & 8189effef4d4f7411f4153b13ff72546dd682c69\\
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   120
2salt & $\Rightarrow$ & 1528375d5ceb7d71597053e6877cc570067a738f\\
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   121
3salt & $\Rightarrow$ & d646e213d4f87e3971d9dd6d9f435840eb6a1c06\\
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   122
4salt & $\Rightarrow$ & 5b9e85269e4461de0238a6bf463ed3f25778cbba\\
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   123
\end{tabular}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   124
\end{center}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   125
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   126
\begin{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   127
\item in Unix systems: \texttt{hash(salt + password)}, or even
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   128
\texttt{hash$^{\texttt{1500}}$(salt + password)}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   129
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   130
\end{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   131
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   132
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   133
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   134
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   135
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   136
\begin{frame}[c]
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   137
\frametitle{Today's Lecture}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   138
\begin{center}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   139
\begin{tabular}{ccc}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   140
\large online banking  & \hspace{3mm}\large{}vs\hspace{3mm} & \large e-voting\\
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   141
\textcolor{gray}{solved} & & \textcolor{gray}{unsolved}\\
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   142
\end{tabular}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   143
\end{center}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   144
185
f10d905e947f updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 113
diff changeset
   145
\end{frame}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   146
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   147
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   148
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   149
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   150
\mode<presentation>{
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   151
\begin{frame}[t]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   152
\frametitle{\begin{tabular}{@ {}c@ {}}Voting as Security Problem\end{tabular}}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   153
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   154
What are the security requirements of a voting system?\bigskip
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   155
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   156
\begin{itemize}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   157
\item<2->Integrity 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   158
\item<3->Ballot Secrecy
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   159
\item<5->Voter Authentication
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   160
\item<6->Enfranchisement
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   161
\item<7->Availability
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   162
\end{itemize}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   163
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   164
\only<2>{
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   165
\begin{textblock}{5.5}(8,5)
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   166
\begin{bubble}[5cm]\small
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   167
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   168
\begin{minipage}{4.5cm}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   169
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   170
\item The outcome matches with the voters' intend.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   171
\item There might be gigantic sums at stake and need to be defended against.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   172
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   173
\end{minipage}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   174
\end{center}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   175
\end{bubble}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   176
\end{textblock}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   177
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   178
\only<4>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   179
\begin{textblock}{5.5}(8,5)
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   180
\begin{bubble}[5cm]\small
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   181
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   182
\begin{minipage}{4.5cm}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   183
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   184
\item Nobody can find out how you voted.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   185
\item (Stronger) Even if you try, you cannot prove how you voted.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   186
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   187
\end{minipage}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   188
\end{center}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   189
\end{bubble}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   190
\end{textblock}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   191
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   192
\only<5>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   193
\begin{textblock}{5.5}(8,5)
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   194
\begin{bubble}[5cm]\small
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   195
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   196
\begin{minipage}{4.5cm}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   197
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   198
\item Only authorised voters can vote up to the permitted number of votes.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   199
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   200
\end{minipage}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   201
\end{center}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   202
\end{bubble}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   203
\end{textblock}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   204
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   205
\only<6>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   206
\begin{textblock}{5.5}(8,5)
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   207
\begin{bubble}[5cm]\small
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   208
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   209
\begin{minipage}{4.5cm}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   210
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   211
\item Authorised voters should have the opportunity to vote.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   212
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   213
\end{minipage}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   214
\end{center}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   215
\end{bubble}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   216
\end{textblock}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   217
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   218
\only<7>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   219
\begin{textblock}{5.5}(8,5)
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   220
\begin{bubble}[5cm]\small
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   221
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   222
\begin{minipage}{4.5cm}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   223
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   224
\item The voting system should accept all authorised votes and produce results in a timely manner.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   225
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   226
\end{minipage}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   227
\end{center}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   228
\end{bubble}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   229
\end{textblock}}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   230
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   231
\end{frame}}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   232
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   233
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   234
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   235
\begin{frame}[t]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   236
\frametitle{\begin{tabular}{@ {}c@ {}}Problems with Voting\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   237
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   238
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   239
\begin{center}\large
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   240
\begin{tabular}{rcl}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   241
Integrity & vs. & Ballot Secrecy\bigskip\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   242
Authentication & vs. &Enfranchisement   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   243
\end{tabular}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   244
\end{center}\bigskip\bigskip\pause
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   245
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   246
Further constraints:
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   247
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   248
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   249
\item costs
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   250
\item accessibility
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   251
\item convenience
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   252
\item intelligibility 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   253
\end{itemize}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   254
\end{frame}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   255
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   256
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   257
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   258
\begin{frame}[t]
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   259
\frametitle{Traditional Ballot Boxes}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   260
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   261
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   262
\includegraphics[scale=2.5]{pics/ballotbox.jpg}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   263
\end{center}\pause\bigskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   264
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   265
mechanical, but they need a ``protocol''
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   266
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   267
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   268
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   269
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   270
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   271
\begin{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   272
\frametitle{Motives for E-Voting}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   273
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   274
\begin{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   275
\item 76\% of pensioners in the UK vote, but only 44\% of the under-25s\bigskip
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   276
\item convenience\bigskip
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   277
\item speed 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   278
\end{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   279
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   280
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   281
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   282
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   283
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   284
\begin{frame}[t]
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   285
\frametitle{E-Voting}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   286
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   287
\begin{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   288
\item The Netherlands between 1997 - 2006 had electronic voting
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   289
  machines\\ \textcolor{gray}{(hacktivists had found: they can be
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   290
    hacked and also emitted radio signals revealing how you voted)}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   291
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   292
\item Germany had used them in pilot studies\\ \textcolor{gray}{(in
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   293
  2007 a law suit has reached the highest court and it rejected
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   294
  electronic voting on the grounds of not being understandable by the
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   295
  general public)}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   296
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   297
\item UK used optical scan voting systems in a few test polls, but
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   298
  abandoned any wide deployment
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   299
\end{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   300
\end{frame}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   301
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   302
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   303
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   304
\begin{frame}[t]
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   305
\frametitle{E-Voting}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   306
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   307
\mbox{}\\[-12mm]
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   308
\begin{itemize}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   309
\item US used mechanical machines since the 30s, later punch cards,
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   310
  now DREs and optical scan voting machines
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   311
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   312
\item Estonia used in 2007 the Internet for national elections
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   313
  \textcolor{gray}{(there were earlier pilot studies in other
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   314
    countries)}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   315
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   316
\item India uses e-voting devices since at least
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   317
  2003\\ \textcolor{gray}{(``keep-it-simple'' machines produced by a
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   318
    government owned company)}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   319
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   320
\item South Africa used software for its tallying in the 1993
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   321
  elections (when Nelson Mandela was elected) \textcolor{gray}{(they
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   322
    found the tallying software was rigged, but they were able to
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   323
    tally manually)}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   324
\end{itemize}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   325
\end{frame}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   326
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   327
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   328
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   329
\begin{frame}[t]
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   330
\frametitle{E-Voting in Estonia}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   331
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   332
\begin{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   333
\item worlds first general election that used internet voting (2007)
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   334
\item builds on the Estonian ID card (a smartcard like CC)
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   335
\item Internet voting can be used before the election (votes can be changed an
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   336
unlimited amount of times, last vote is tabulated, you can even change your
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   337
vote on the polling day in person)
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   338
\item in the 2011 parliamentary election 24\% voted via Internet\bigskip\pause
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   339
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   340
\item needs to trust the integrity of voters' computers, 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   341
  central server components and the election staff
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   342
\end{itemize}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   343
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   344
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   345
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   346
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   347
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   348
\begin{frame}[t]
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   349
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   350
\footnotesize
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   351
\lstinputlisting[language=Python,xleftmargin=0mm]{../progs/estonia.py}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   352
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   353
\begin{textblock}{5.5}(7.8,0.5)
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   354
\begin{bubble}[5cm]\small
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   355
from \url{https://github.com/vvk-ehk/evalimine/}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   356
\end{bubble}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   357
\end{textblock}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   358
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   359
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   360
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   361
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   362
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   363
\begin{frame}[t]
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   364
E-Voting in \textbf{Theory}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   365
\small
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   366
\begin{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   367
\item Alice prepares and audits a ballot, then casts an encrypted 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   368
  ballot, which requires her to authenticate to a server.
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   369
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   370
\item A bulletin board posts Alice's name and encrypted ballot. 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   371
  Anyone, including Alice, can check the bulletin board and find her 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   372
  encrypted vote posted.
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   373
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   374
\item When the election closes, all votes are shuffled and the system produces 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   375
  a non-interactive proof of a correct shuffling. (zero-knowledge-proofs)
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   376
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   377
\item After a reasonable complaint period to let auditors check the 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   378
  shuffling, all shuffled ballots are decrypted, and the system provides 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   379
  a decryption proof for each decrypted ballot. (zero-knowledge-proofs)
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   380
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   381
\item Perform a tally of the decrypted votes.
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   382
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   383
\item An auditor can download the entire election data and verify the 
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   384
  shuffle, decryptions and tally.
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   385
\end{itemize}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   386
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   387
\end{frame}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   388
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   389
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   390
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   391
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   392
\mode<presentation>{
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   393
\begin{frame}[t]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   394
\frametitle{\begin{tabular}{@ {}c@ {}}A Brief History of Voting\end{tabular}}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   395
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   396
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   397
\begin{itemize}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   398
\item Athenians
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   399
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   400
\item show of hands
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   401
\item ballots on pieces of pottery
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   402
\item different colours of stones
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   403
\item ``facebook''-like authorisation 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   404
\end{itemize}\bigskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   405
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   406
\textcolor{gray}{problems with vote buying / no ballot privacy}\bigskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   407
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   408
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   409
\item French Revolution and the US Constitution got things ``started'' with 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   410
paper ballots (you first had to bring your own; later they were pre-printed by parties)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   411
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   412
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   413
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   414
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   415
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   416
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   417
\begin{frame}[t]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   418
\frametitle{\begin{tabular}{@ {}c@ {}}Ballot Boxes\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   419
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   420
Security policies with paper ballots:
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   421
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   422
\begin{enumerate}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   423
\item you need to check that the ballot box is empty at the start of the poll / no false bottom (to prevent ballot stuffing)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   424
\item you need to guard the ballot box during the poll until counting
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   425
\item tallied by a team at the end of the poll (independent observers) 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   426
\end{enumerate}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   427
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   428
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   429
\includegraphics[scale=1.5]{pics/ballotbox.jpg}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   430
\end{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   431
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   432
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   433
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   434
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   435
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   436
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   437
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   438
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   439
Which security requirements do paper ballots satisfy better than voice voting?\bigskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   440
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   441
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   442
\item Integrity
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   443
\item Enfranchisement
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   444
\item Ballot secrecy
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   445
\item Voter authentication
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   446
\item Availability
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   447
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   448
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   449
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   450
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   451
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   452
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   453
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   454
\begin{frame}[t]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   455
\frametitle{\begin{tabular}{@ {}c@ {}}Paper Ballots\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   456
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   457
What can go wrong with paper ballots?
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   458
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   459
\only<2>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   460
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   461
\includegraphics[scale=0.8]{pics/tweet.jpg}\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   462
\footnotesize William M.~Tweed, US Politician in 1860's\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   463
``As long as I count the votes, what are you going to do about it?''
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   464
\end{center}}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   465
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   466
\only<3>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   467
\medskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   468
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   469
\begin{minipage}{10cm}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   470
{\bf Chain Voting Attack}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   471
\begin{enumerate}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   472
\item you obtain a blank ballot and fill it out as you want
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   473
\item you give it to a voter outside the polling station
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   474
\item voter receives a new blank ballot
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   475
\item voter submits prefilled ballot
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   476
\item voter gives blank ballot to you, you give money
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   477
\item goto 1
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   478
\end{enumerate}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   479
\end{minipage}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   480
\end{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   481
}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   482
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   483
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   484
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   485
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   486
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   487
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   488
\begin{frame}[t]
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   489
\frametitle{\Large Mechanical Voting Machines}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   490
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   491
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   492
\item<1-> Lever Voting Machines (ca.~1930 - 1990)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   493
\only<1>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   494
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   495
\includegraphics[scale=0.56]{pics/leavermachine.jpg}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   496
\end{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   497
}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   498
\item<2->Punch Cards (ca.~1950 - 2000)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   499
\only<2>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   500
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   501
\includegraphics[scale=0.5]{pics/punchcard1.jpg}\;\;
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   502
\includegraphics[scale=0.46]{pics/punchcard2.jpg}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   503
\end{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   504
}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   505
\end{itemize}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   506
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   507
\end{frame}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   508
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   509
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   510
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   511
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   512
\begin{frame}[t]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   513
\frametitle{\begin{tabular}{@ {}c@ {}}Electronic Voting Machines\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   514
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   515
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   516
\begin{tabular}{c}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   517
\includegraphics[scale=0.45]{pics/dre1.jpg}\; 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   518
\includegraphics[scale=0.40]{pics/dre2.jpg}\\\hline\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   519
\includegraphics[scale=0.5]{pics/opticalscan.jpg} 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   520
\end{tabular}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   521
\end{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   522
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   523
\only<1->{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   524
\begin{textblock}{5.5}(1,4)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   525
DREs
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   526
\end{textblock}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   527
\only<1->{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   528
\begin{textblock}{5.5}(1,11)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   529
Optical Scan
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   530
\end{textblock}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   531
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   532
\only<2>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   533
\begin{textblock}{5.5}(0.5,14.5)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   534
all are computers
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   535
\end{textblock}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   536
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   537
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   538
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   539
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   540
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   541
\mode<presentation>{
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   542
\begin{frame}[c]
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   543
\frametitle{\begin{tabular}{@ {}c@ {}}DREs\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   544
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   545
Direct-recording electronic voting machines\\ 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   546
(votes are recorded for example on memory cards)
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   547
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   548
typically touchscreen machines
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   549
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   550
usually no papertrail
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   551
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   552
\begin{center}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   553
\includegraphics[scale=0.56]{pics/dre1.jpg}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   554
\end{center}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   555
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   556
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   557
\end{frame}}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   558
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   559
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   560
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   561
\mode<presentation>{
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   562
\begin{frame}[c]
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   563
\frametitle{\begin{tabular}{@ {}c@ {}}Diebold Machines\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   564
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   565
Alex Halderman:
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   566
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   567
\begin{itemize}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   568
\item acquired a machine from an anonymous source\medskip
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   569
\item they try to keep secret the source code running the machine\medskip\pause
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   570
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   571
\item first reversed-engineered the machine (extremely tedious)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   572
\item could completely reboot the machine and even install a virus that infects other Diebold machines
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   573
\item obtained also the source code for other machines
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   574
\end{itemize}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   575
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   576
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   577
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   578
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   579
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   580
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   581
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   582
\frametitle{\begin{tabular}{@ {}c@ {}}Diebold Machines\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   583
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   584
What could go wrong?\pause \;\;Failure-in-depth.\bigskip\pause
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   585
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   586
A non-obvious problem:
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   587
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   588
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   589
\item you can nowadays get old machines, which still store old polls
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   590
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   591
\item the paper ballot box needed to be secured during the voting until counting;
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   592
e-voting machines need to be secured during the entire life-time  
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   593
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   594
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   595
\end{frame}}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   596
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   597
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   598
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   599
\mode<presentation>{
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   600
\begin{frame}[c]
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   601
\frametitle{\begin{tabular}{@ {}c@ {}}Paper Trail\end{tabular}}
18
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   602
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   603
Conclusion:\\ Any electronic solution should have a paper trail.
18
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   604
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   605
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   606
\begin{tabular}{c}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   607
\includegraphics[scale=0.5]{pics/opticalscan.jpg} 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   608
\end{tabular}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   609
\end{center}\pause
18
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   610
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   611
You still have to solve problems about
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   612
voter registration, voter authentication, guarding against tampering
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   613
18
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   614
\end{frame}}
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   615
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   616
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   617
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   618
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   619
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   620
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   621
\frametitle{\begin{tabular}{@ {}c@ {}}E-Voting in India\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   622
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   623
Their underlying engineering principle is ``keep-it-simple'':
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   624
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   625
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   626
\begin{tabular}{c}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   627
\includegraphics[scale=1.05]{pics/indiaellection.jpg}\;\;
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   628
\includegraphics[scale=0.40]{pics/india1.jpg}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   629
\end{tabular}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   630
\end{center}\medskip\pause
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   631
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   632
Official claims: ``perfect'', ``tamperproof'', ``no need for technical improvements'' , ``infallible'' 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   633
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   634
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   635
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   636
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   637
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   638
\begin{frame}[c]
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   639
\frametitle{\begin{tabular}{@ {}c@ {}}Lessons Learned\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   640
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   641
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   642
\item keep a paper trail and design your system to keep this secure\medskip
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   643
\item make the software open source (avoid security-by-obscurity)\medskip
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   644
\item have a simple design in order to minimise the attack surface
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   645
\end{itemize}\pause
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   646
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   647
But overall in times of NSA/state sponsered cyber-crime, e-voting is too
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   648
hard with current technology.
106
9feafc9bbe9f added slides
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 105
diff changeset
   649
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   650
\end{frame}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   651
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   652
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   653
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   654
\begin{frame}[c]
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   655
\frametitle{\Large Online Banking vs.~E-Voting}
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   656
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   657
\begin{itemize}
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   658
\item online banking: if fraud occurred you try to identify who did
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   659
  what (somebody's account got zero)\bigskip
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   660
\item e-voting: some parts can be done electronically, but not the
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   661
  actual voting
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   662
\end{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   663
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   664
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   665
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   666
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   667
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   668
\begin{frame}[c]
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   669
\frametitle{Student In-Lecture Polling}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   670
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   671
\begin{center}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   672
\includegraphics[scale=0.3]{pics/clicker.png}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   673
\end{center}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   674
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   675
\begin{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   676
\item guaranties anonymity
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   677
\item integrity by electronic means\bigskip
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   678
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   679
\item how to achieve the same in ``software''?
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   680
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   681
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   682
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   683
\end{frame}
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   684
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   685
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   686
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   687
\begin{frame}[c]
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   688
\frametitle{Anonymity}
107
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 106
diff changeset
   689
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   690
\begin{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   691
\item anonymity through one-time pads
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   692
\begin{center}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   693
\includegraphics[scale=0.3]{pics/tan.jpg}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   694
\end{center}\bigskip\pause
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   695
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   696
\item solving the problem of distribution
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   697
\begin{center}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   698
\includegraphics[scale=0.3]{pics/bulletin.jpg}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   699
\end{center}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   700
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   701
\end{itemize}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   702
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   703
\end{frame}
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   704
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
18
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   705
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   706
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   707
\mode<presentation>{
Christian Urban <urbanc@in.tum.de>
parents: 17
diff changeset
   708
\begin{frame}[c]
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   709
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   710
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   711
\includegraphics[scale=0.56]{pics/Voting1.png}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   712
\end{center}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   713
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   714
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   715
\end{frame}}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   716
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   717
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   718
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   719
\mode<presentation>{
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   720
\begin{frame}[c]
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   721
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   722
\begin{center}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   723
\includegraphics[scale=0.56]{pics/Voting2.png}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   724
\end{center}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   725
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   726
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   727
\end{frame}}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   728
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   729
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   730
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   731
\mode<presentation>{
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   732
\begin{frame}[c]
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   733
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   734
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   735
\includegraphics[scale=0.56]{pics/Voting3.png}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   736
\end{center}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   737
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   738
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   739
\end{frame}}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   740
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   741
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   742
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   743
\mode<presentation>{
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   744
\begin{frame}[c]
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   745
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   746
\begin{center}
105
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 90
diff changeset
   747
\includegraphics[scale=0.56]{pics/Voting4.png}
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   748
\end{center}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   749
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   750
17
Christian Urban <urbanc@in.tum.de>
parents: 16
diff changeset
   751
\end{frame}}
Christian Urban <urbanc@in.tum.de>
parents: 16
diff changeset
   752
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
187
0379bd6f3d21 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 186
diff changeset
   753
108
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   754
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   755
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   756
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   757
\frametitle{Unix-Style Access Control}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   758
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   759
How to do access control? In Unix you have
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   760
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   761
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   762
\item you have users and you have groups/roles:
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   763
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   764
\item some special roles: root
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   765
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   766
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   767
  
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   768
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   769
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   770
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   771
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   772
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   773
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   774
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   775
\frametitle{Unix-Style Access Control}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   776
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   777
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   778
\item Q: ``I am using Windows. Why should I care?'' \\ A: In Windows you have similar AC:
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   779
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   780
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   781
\begin{tabular}{l}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   782
administrators group\\ 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   783
\hspace{5mm}(has complete control over the machine)\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   784
authenticated users\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   785
server operators\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   786
power users\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   787
network configuration operators\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   788
\end{tabular}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   789
\end{center}\medskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   790
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   791
\item Modern versions of Windows have more fine-grained AC than Unix; they do not have a setuid bit, but
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   792
have \texttt{runas} (asks for a password).\pause
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   793
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   794
\item OS-provided access control can \alert{\bf add} to your
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   795
security.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   796
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   797
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   798
  
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   799
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   800
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   801
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   802
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   803
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   804
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   805
\frametitle{\begin{tabular}{c}Network Applications:\\[-1mm] Privilege Separation\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   806
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   807
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   808
\begin{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   809
  \begin{tikzpicture}[scale=1]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   810
  
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   811
  \draw[line width=1mm] (-.3, 0) rectangle (1.5,2);
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   812
  \draw (4.7,1) node {Internet};
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   813
  \draw (-2.7,1.7) node {\footnotesize Application};
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   814
  \draw (0.6,1.7) node {\footnotesize Interface};
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   815
  \draw (0.6,-0.4) node {\footnotesize \begin{tabular}{c}unprivileged\\[-1mm] process\end{tabular}};
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   816
  \draw (-2.7,-0.4) node {\footnotesize \begin{tabular}{c}privileged\\[-1mm] process\end{tabular}};
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   817
  
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   818
  \draw[line width=1mm] (-1.8, 0) rectangle (-3.6,2);
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   819
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   820
  \draw[white] (1.7,1) node (X) {};
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   821
  \draw[white] (3.7,1) node (Y) {};
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   822
  \draw[red, <->, line width = 2mm] (X) -- (Y);
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   823
 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   824
  \draw[red, <->, line width = 1mm] (-0.6,1) -- (-1.6,1);
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   825
  \end{tikzpicture}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   826
\end{center}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   827
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   828
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   829
\item the idea is make the attack surface smaller and 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   830
mitigate the consequences of an attack
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   831
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   832
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   833
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   834
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   835
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%     
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   836
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   837
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   838
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   839
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   840
\frametitle{Lessons from Access Control}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   841
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   842
Not just restricted to Unix:
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   843
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   844
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   845
\item if you have too many roles (i.e.~too finegrained AC), then 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   846
	hierarchy is too complex\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   847
	\textcolor{gray}{you invite situations like\ldots let's be root}\bigskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   848
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   849
\item you can still abuse the system\ldots
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   850
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   851
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   852
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   853
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   854
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   855
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   856
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   857
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   858
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   859
\frametitle{\begin{tabular}{@ {}c@ {}}A ``Cron''-Attack\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   860
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   861
The idea is to trick a privileged person to do something on your behalf:
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   862
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   863
\begin{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   864
\item root:\\\texttt{rm /tmp/*/*}\bigskip\bigskip\pause
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   865
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   866
\footnotesize
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   867
\begin{minipage}{1.1\textwidth}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   868
\textcolor{gray}{the shell behind the scenes:}\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   869
\textcolor{gray}{\texttt{rm /tmp/dir$_1$/file$_1$ /tmp/dir$_1$/file$_2$ /tmp/dir$_2$/file$_1$ \ldots}}\bigskip\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   870
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   871
\textcolor{gray}{this takes time}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   872
\end{minipage}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   873
\end{itemize}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   874
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   875
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   876
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   877
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   878
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   879
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   880
\mode<presentation>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   881
\begin{frame}[c]
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   882
\frametitle{\begin{tabular}{@ {}c@ {}}A ``Cron''-Attack\end{tabular}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   883
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   884
\begin{enumerate}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   885
\item attacker \textcolor{gray}{(creates a fake passwd file)}\\ 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   886
\texttt{mkdir /tmp/a; cat > /tmp/a/passwd}\medskip
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   887
\item root \textcolor{gray}{(does the daily cleaning)}\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   888
\texttt{rm /tmp/*/*}\medskip\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   889
\hspace{2cm}\textcolor{gray}{\small records that \texttt{/tmp/a/passwd}}\\ 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   890
\hspace{2cm}\textcolor{gray}{\small should be deleted, but does not do it yet}\medskip\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   891
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   892
\item attacker \textcolor{gray}{(meanwhile deletes the fake passwd file, and establishes a link to 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   893
the real passwd file)}\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   894
\texttt{rm /tmp/a/passwd; rmdir /tmp/a;}\\\texttt{ln -s /etc /tmp/a}\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   895
\item root now deletes  the real passwd file
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   896
\end{enumerate}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   897
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   898
\only<2>{
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   899
\begin{textblock}{11}(2,5)
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   900
\begin{tikzpicture}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   901
\draw (0,0) node[inner sep=2mm,fill=cream, ultra thick, draw=red, rounded corners=2mm] 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   902
{\normalsize\color{darkgray}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   903
\begin{minipage}{9cm}\raggedright
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   904
To prevent this kind of attack, you need additional
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   905
policies (don't do such operations as root).
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   906
\end{minipage}};
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   907
\end{tikzpicture}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   908
\end{textblock}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   909
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   910
\end{frame}}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 107
diff changeset
   911
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
17
Christian Urban <urbanc@in.tum.de>
parents: 16
diff changeset
   912
16
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   913
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   914
\end{document}
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   915
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   916
%%% Local Variables:  
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   917
%%% mode: latex
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   918
%%% TeX-master: t
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   919
%%% End: 
d627d9bc15c8 new slides
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   920