000 | nam a22 7a 4500 | ||
---|---|---|---|
999 |
_c29276 _d29276 |
||
008 | 190220b xxu||||| |||| 00| 0 eng d | ||
020 | _a9783319671062 | ||
082 |
_a005.8 _bGIU |
||
100 | _aGiustolisi, Rosario | ||
245 | _aModelling and verification of secure exams | ||
260 |
_aCham : _bSpringer International Publishing, _c2018 |
||
300 |
_axi, 138 p. : _bill. ; _c24.1 cm. |
||
365 |
_aEURO _b76.99 |
||
440 | _aInformation security and cryptography. | ||
504 | _aIncludes bibliographical references. | ||
520 | _aIn this book the author introduces a novel approach to securing exam systems. He provides an in-depth understanding, useful for studying the security of exams and similar systems, such as public tenders, personnel selections, project reviews, and conference management systems. After a short chapter that explains the context and objectives of the book, in Chap. 2 the author introduces terminology for exams and the foundations required to formulate their security requirements. He describes the tasks that occur during an exam, taking account of the levels of detail and abstraction of an exam specification and the threats that arise out of the different exam roles. He also presents a taxonomy that classifies exams by types and categories. Chapter 3 contains formal definitions of the authentication, privacy, and verifiability requirements for exams, a framework based on the applied pi-calculus for the specification of authentication and privacy, and a more abstract approach based on set-theory that enables the specification of verifiability. Chapter 4 describes the Huszti-Pethő protocol in detail and proposes a security enhancement. In Chap. 5 the author details Remark!, a protocol for Internet-based exams, discussing its cryptographic building blocks and some security considerations. Chapter 6 focuses on WATA, a family of computer-assisted exams that employ computer assistance while keeping face-to-face testing. The chapter also introduces formal definitions of accountability requirements and details the analysis of a WATA protocol against such definitions. In Chaps. 4, 5, and 6 the author uses the cryptographic protocol verifier ProVerif for the formal analyses. Finally, the author outlines future work in Chap. 7. The book is valuable for researchers and graduate students in the areas of information security, in particular for people engaged with exams or protocols. | ||
650 | _aComputer science | ||
650 | _aData structures | ||
650 | _aLogic, symbolic and mathematical | ||
650 | _aComputers | ||
650 | _aApplication software | ||
650 | _aData structures | ||
650 | _aCryptology | ||
650 | _aInformation theory. | ||
650 | _aInformation systems | ||
650 | _aCommunication service | ||
650 | _aComputer security | ||
650 | _aComputer networks | ||
942 |
_2ddc _cBK |