Modelling and Verification of Secure Exams

  • Rosario Giustolisi

Part of the Information Security and Cryptography book series (ISC)

Table of contents

  1. Front Matter
    Pages i-xi
  2. Rosario Giustolisi
    Pages 1-5
  3. Rosario Giustolisi
    Pages 7-22
  4. Rosario Giustolisi
    Pages 23-41
  5. Rosario Giustolisi
    Pages 43-63
  6. Rosario Giustolisi
    Pages 65-94
  7. Rosario Giustolisi
    Pages 95-123
  8. Back Matter
    Pages 125-138

About this book


In this book the author introduces a novel approach to securing exam systems. He provides an in-depth understanding, useful for studying the security of exams and similar systems, such as public tenders, personnel selections, project reviews, and conference management systems.

After a short chapter that explains the context and objectives of the book, in Chap. 2 the author introduces terminology for exams and the foundations required to formulate their security requirements. He describes the tasks that occur during an exam, taking account of the levels of detail and abstraction of an exam specification and the threats that arise out of the different exam roles. He also presents a taxonomy that classifies exams by types and categories. Chapter 3 contains formal definitions of the authentication, privacy, and verifiability requirements for exams, a framework based on the applied pi-calculus for the specification of authentication and privacy, and a more abstract approach based on set-theory that enables the specification of verifiability. Chapter 4 describes the Huszti-Pethő protocol in detail and proposes a security enhancement. In Chap. 5 the author details Remark!, a protocol for Internet-based exams, discussing its cryptographic building blocks and some security considerations. Chapter 6 focuses on WATA, a family of computer-assisted exams that employ computer assistance while keeping face-to-face testing. The chapter also introduces formal definitions of accountability requirements and details the analysis of a WATA protocol against such definitions. In Chaps. 4, 5, and 6 the author uses the cryptographic protocol verifier ProVerif for the formal analyses. Finally, the author outlines future work in Chap. 7.

The book is valuable for researchers and graduate students in the areas of information security, in particular for people engaged with exams or protocols.


Formal Methods Authentication Privacy Verifiability Exam Protocols Certificate Validation Remark! Exam Huszti-Pethő Protocol WATA Protocol ProVerif

Authors and affiliations

  • Rosario Giustolisi
    • 1
  1. 1.Department of Computer ScienceIT University of CopenhagenCopenhagenDenmark

Bibliographic information

  • DOI
  • Copyright Information Springer International Publishing AG, part of Springer Nature 2018
  • Publisher Name Springer, Cham
  • eBook Packages Computer Science Computer Science (R0)
  • Print ISBN 978-3-319-67106-2
  • Online ISBN 978-3-319-67107-9
  • Series Print ISSN 1619-7100
  • Series Online ISSN 2197-845X
  • Buy this book on publisher's site
Industry Sectors
Finance, Business & Banking
IT & Software