Attacks on RFID-Based Electronic Voting Systems Yossi Oren and Avishai Wool, http://eprint.iacr.org/2009 ipurl.com/e-voting IEEE RFID’2010, Orlando
Yossi Oren and Avishai Wool, snipurl.com/e-voting IEEE RFID’2010, Orlando FL.
Dec 19, 2015
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Attacks on RFID-Based Electronic Voting Systems
Yossi Oren and Avishai Wool,
http://eprint.iacr.org/2009/422snipurl.com/e-voting
IEEE RFID’2010, Orlando FL
Agenda
What’s the Israeli e-Voting Scheme? How can we break it cheaply and
completely?
Not on the Agenda
Why the new scheme is legally unsound
Why our (ex-)ministers are all corrupt
The biometric database
Why do we have elections?
Elections
What’s a good election scheme? General Free Equal Fair
Preliminaries
Definition: An election E is an NP election, if…
N P
Conjecture: An election is only secure if it is NP-secure Claim: The Israeli Scheme is NP-insecure
How Do We Vote Today?
Israel votes by national list proportional representation
How Do We Vote Today?
Voter
Voting Booth
LocalElections
Committee
Ballot Box
Paper Ballots
Blank Ballots
Blank Ballots
Signed Envelopes
Blank Ballots
Blank Ballots
Cast Votes
List of Authorized
Voters
NP
Voter
Voting Booth
LocalElections
Committee
Ballot Box
Paper Ballots
Blank Ballots
Blank Ballots
Signed Envelopes
Blank Ballots
Blank Ballots
Cast Votes
List of Authorized
Voters
N
How Do We Vote Today?
NP
Voter
Voting Booth
LocalElections
Committee
Ballot Box
Paper Ballots
Blank Ballots
Blank Ballots
Signed Envelopes
Blank Ballots
Blank Ballots
Cast Votes
List of Authorized
Voters
How Do We Vote Today?
NP
•72.1% participation rate•Less than 1.3% disqualified votes
(including protest “blank ballot” votes)•99% final results 6 hours after poll closes
Public Trust
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
Tomorrow’s Ballot
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
N PN
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
N PN
Attacks on the Voting System
Relay Attacks Ballot Sniffing Single Dissident Ballot Stuffing
Non-Relay Attacks Zapper Remote Jamming Implementation Attacks
Relay Attacks Ballot Sniffing Single Dissident Ballot Stuffing
Non-Relay Attacks Zapper Remote Jamming Implementation Attacks
Relay Attacks
5 cm
HF RFID Reader HF RFID Tag
L
G
HF RFID Tag
The Ballot Sniffing Attack
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
P N
N
N
PP
N
N
N PN
P N
N
N
PP
N
N
The Ballot Stuffing Attack
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
P N
N
N
PP
N
N
N P
P
P
P
N
P
P
P
The Zapper Attack
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
P
PP
P
P
P
P
P
Zap!
Zap!
The Government’s Response…
:// . . /http www youtube com? = 3-watch v wxd YodOmM
Implementation Attacks
Session Hijacking Replay Attacks Semantic Insecurity …
Conclusion
Is the new e-voting scheme a good scheme? General Free Equal Fair
Is the new e-voting scheme a good scheme? General Free Equal Fair
Thank You!
If it ain’t broke, don’t fix
it!
http://eprint.iacr.org/2009/422snipurl.com/e-voting
Related Documents
