Related Work – A Landscape of Requirement Catalogues

Abstract

While the different electronic voting systems are proposed and discussed in the first part of the foundation, this chapter presents an overview and analysis of existing approaches for the evaluation of electronic voting systems. It is discussion is necessary to know these approaches and their vulnerabilities in order to provide an exhaustive list of requirements and an evaluation approach.

The surveyed approaches include requirement catalogues, ordinance, laws, and research activities. The discussed list of requirements were developed by people from different disciplines, like a group of security experts, data protection officers, security auditing enterprises, lawyers, or security auditing civil services.

The first part of this chapter concentrates on requirement catalogues for electronic voting machines (in particular, the German and American election regulations) while the second part discusses those for remote electronic voting systems (in particular, the Council of Europe recommendations, the catalogue for “Online-Voting Systems for Non-parliamentary Elections”, the catalogue of the Gesellschaft für Informatik, the Swiss and Austrian election law, as well as the Network Voting System Standards). Afterwards, scientific papers are analysed, in particular Shamos’ commandments, Mercuri’s PhD thesis, a technical report from the EU CyberVote project, and McGaley’s PhD thesis. In all three cases, the analysis is structured according to

• context / background in which the requirements have been developed,

• input sources used,

• type of electronic voting system addressed ,

• categories in which the requirements are classified / level of detail for the requirements,

• proposed evaluation and certification techniques (including underlying trust model), and

• people identified to oversee the evaluation and certification.

The vulnerabilities are summarised in the conclusion.