Software Security Evaluation for eVoting Systems

Abstract

This paper follows on from Recommendation CM/Rec(2017)5 of the Council of Europe on eVoting in defining the basic principles and requirements of a software security evaluation according to Common Criteria that distinguishes the main differences in the two recommendations, namely verifiability and voter secrecy. It proposes a definition for assets, threats and objectives and discusses the differences between the current Recommendation CM/Rec(2017)5 and its predecessor, Rec(2004)11.