Reference : Trustworthy exams without trusted parties

	Document type :	Scientific journals : Article
	Discipline(s) :	Engineering, computing & technology : Computer science
	Focus Areas :	Security, Reliability and Trust
	To cite this reference:	http://hdl.handle.net/10993/33325

Title :	Trustworthy exams without trusted parties
Language :	English
Author, co-author :	Bella, Giampaolo [University of Catania > Mathematics and Informatics]
	Giustolisi, Rosario [Swedish Institute of Computer Science]
	Lenzini, Gabriele [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Ryan, Peter [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
Publication date :	1-Jun-2017
Journal title :	Computer and Security
Volume :	67
Pages :	291-307
Peer reviewed :	Yes (verified by ORBilu)
Audience :	International
ISSN :	0167-4048
Keywords :	[en] Assessment ; Proverif ; Formal Methods ; Security Protocols
Abstract :	[en] Historically, exam security has mainly focused on threats ascribed to candidate cheating. Such threats have been normally mitigated by invigilation and anti-plagiarism methods. However, as recent exam scandals confirm, also invigilators and authorities may pose security threats. The introduction of computers into the different phases of an exam, such as candidate registration, brings new security issues that should be addressed with the care normally devoted to security protocols. This paper proposes a protocol that meets a wide set of security requirements and resists threats that may originate from candidates as well as from exam administrators. By relying on a combination of oblivious transfer and visual cryptography schemes, the protocol does not need to rely on any trusted third party. We analyse the protocol formally in ProVerif and prove that it verifies all the stated security requirements.
Research centres :	Interdisciplinary Centre for Security, Reliability and Trust (SnT) > Applied Security and Information Assurance Group (APSIA)
Target :	Researchers
Permalink :	http://hdl.handle.net/10993/33325
DOI :	10.1016/j.cose.2016.12.005
Other URL :	http://doi.org/10.1016/j.cose.2016.12.005

	File(s) associated to this reference
	Fulltext file(s): File Commentary Version Size Access Limited access 1-s2.0-S0167404816301766-main.pdf Publisher postprint 1.38 MB Request a copy

All documents in ORBi^lu are protected by a user license.

 

University of Luxembourg Library |  Feedback |  Legal notices Site Map