{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:35:38Z","timestamp":1750307738791,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2009,11,9]],"date-time":"2009-11-09T00:00:00Z","timestamp":1257724800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2009,11,9]]},"DOI":"10.1145\/1653662.1653719","type":"proceedings-article","created":{"date-parts":[[2009,11,11]],"date-time":"2009-11-11T13:02:08Z","timestamp":1257944528000},"page":"463-476","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["On voting machine design for verification and testability"],"prefix":"10.1145","author":[{"given":"Cynthia","family":"Sturton","sequence":"first","affiliation":[{"name":"University of California, Berkeley, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Susmit","family":"Jha","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sanjit A.","family":"Seshia","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Wagner","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2009,11,9]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"USENIX Security Symposium. USENIX Association","author":"Adida B.","year":"2008","unstructured":"B. Adida . Helios : Web-based open-audit voting . In USENIX Security Symposium. USENIX Association , 2008 . B. Adida. Helios: Web-based open-audit voting. In USENIX Security Symposium. USENIX Association, 2008."},{"key":"e_1_3_2_1_2_1","volume-title":"Nov.","author":"Alexander K.","year":"2008","unstructured":"K. Alexander and P. Smith . Verifying the vote in 2008 presidential election battleground states , Nov. 2008 . http:\/\/www.calvoter.org\/issues\/votingtech\/pub\/pres2008_ev.html. K. Alexander and P. Smith. Verifying the vote in 2008 presidential election battleground states, Nov. 2008. http:\/\/www.calvoter.org\/issues\/votingtech\/pub\/pres2008_ev.html."},{"key":"e_1_3_2_1_3_1","volume-title":"2007 Annual Meeting of the American Political Science Association","author":"Appel A.","year":"2007","unstructured":"A. Appel . Effective audit policy for voter-verified paper ballots . Presented at 2007 Annual Meeting of the American Political Science Association , Sept. 2007 . http:\/\/www.cs.princeton.edu\/~appel\/papers\/appel-audits.pdf. A. Appel. Effective audit policy for voter-verified paper ballots. Presented at 2007 Annual Meeting of the American Political Science Association, Sept. 2007. http:\/\/www.cs.princeton.edu\/~appel\/papers\/appel-audits.pdf."},{"key":"e_1_3_2_1_4_1","unstructured":"Beaver SMT solver for bit-vector arithmetic. http:\/\/uclid.eecs.berkeley.edu\/beaver\/.  Beaver SMT solver for bit-vector arithmetic. http:\/\/uclid.eecs.berkeley.edu\/beaver\/."},{"key":"e_1_3_2_1_5_1","volume-title":"Workshop on Trustworthy Elections","author":"Bruck S.","year":"2001","unstructured":"S. Bruck , D. Jefferson , and R. L. Rivest . A modular voting architecture (\"Frogs\") . In Workshop on Trustworthy Elections , August 2001 . http:\/\/www.vote.caltech.edu\/wote01\/pdfs\/amva.pdf. S. Bruck, D. Jefferson, and R. L. Rivest. A modular voting architecture (\"Frogs\"). In Workshop on Trustworthy Elections, August 2001. http:\/\/www.vote.caltech.edu\/wote01\/pdfs\/amva.pdf."},{"volume-title":"EVT'08: Proceedings of the 2008 USENIX\/Accurate Electronic Voting Technology Workshop.","author":"Chaum D.","key":"e_1_3_2_1_6_1","unstructured":"D. Chaum , R. Carback , J. Clark , A. Essex , S. Popoveniuc , R. L. Rivest , P. Y. Ryan , E. Shen , and A. T. Sherman . Scantegrity II: End-to-end verifiability for optical scan election systems using invisible ink confirmation codes . In EVT'08: Proceedings of the 2008 USENIX\/Accurate Electronic Voting Technology Workshop. D. Chaum, R. Carback, J. Clark, A. Essex, S. Popoveniuc, R. L. Rivest, P. Y. Ryan, E. Shen, and A. T. Sherman. Scantegrity II: End-to-end verifiability for optical scan election systems using invisible ink confirmation codes. In EVT'08: Proceedings of the 2008 USENIX\/Accurate Electronic Voting Technology Workshop."},{"key":"e_1_3_2_1_7_1","volume-title":"Model Checking","author":"Clarke E. M.","year":"2000","unstructured":"E. M. Clarke , O. Grumberg , and D. A. Peled . Model Checking . MIT Press , 2000 . E. M. Clarke, O. Grumberg, and D. A. Peled. Model Checking. MIT Press, 2000."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.32"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455793"},{"key":"e_1_3_2_1_11_1","volume-title":"Apr.","author":"Jefferson D.","year":"2004","unstructured":"D. Jefferson . New concerns about electronic voting: What VVVPAT cannot fix , Apr. 2004 . Personal communication. D. Jefferson. New concerns about electronic voting: What VVVPAT cannot fix, Apr. 2004. Personal communication."},{"key":"e_1_3_2_1_12_1","volume-title":"July","author":"Jefferson D.","year":"2007","unstructured":"D. Jefferson , E. Ginnold , K. Midstokke , K. Alexander , P. Stark , and A. Lehmkuhl . Evaluation of Audit Sampling Models and Options for Strengthening California's Manual Count , July 2007 . http:\/\/www.sos.ca.gov\/elections\/peas\/final_peaswg_report.pdf. D. Jefferson, E. Ginnold, K. Midstokke, K. Alexander, P. Stark, and A. Lehmkuhl. Evaluation of Audit Sampling Models and Options for Strengthening California's Manual Count, July 2007. http:\/\/www.sos.ca.gov\/elections\/peas\/final_peaswg_report.pdf."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02658-4_53"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1022594.1022622"},{"key":"e_1_3_2_1_15_1","unstructured":"D. W. Jones. Minimizing the Trusted Base Dec. 2004. Presentation for the CSTB Framework for Understanding Electronic Voting http:\/\/www.cs.uiowa.edu\/~jones\/voting\/nas-cstb2004a.shtml.  D. W. Jones. Minimizing the Trusted Base Dec. 2004. Presentation for the CSTB Framework for Understanding Electronic Voting http:\/\/www.cs.uiowa.edu\/~jones\/voting\/nas-cstb2004a.shtml."},{"key":"e_1_3_2_1_16_1","volume-title":"Standards and Testing","author":"McDaniel P.","year":"2007","unstructured":"P. McDaniel , M. Blaze , G. Vigna, and et al. EVEREST: Evaluation and Validation of Election-Related Equipment , Standards and Testing , Dec 2007 . http:\/\/www.sos.state.oh.us\/SOS\/upload\/everest\/14-AcademicFinalEVERESTReport.pdf. P. McDaniel, M. Blaze, G. Vigna, and et al. EVEREST: Evaluation and Validation of Election-Related Equipment, Standards and Testing, Dec 2007. http:\/\/www.sos.state.oh.us\/SOS\/upload\/everest\/14-AcademicFinalEVERESTReport.pdf."},{"key":"e_1_3_2_1_17_1","unstructured":"K. McMillan. Cadence SMV 1998. http:\/\/www.kenmcmil.com\/.  K. McMillan. Cadence SMV 1998. http:\/\/www.kenmcmil.com\/."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSPEC.2002.1038569"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/501983.502000"},{"key":"e_1_3_2_1_21_1","first-page":"50227","volume-title":"Aug.","author":"Norden L.","year":"2007","unstructured":"L. Norden , A. Burstein , J. L. Hall , and M. Chen . Post-Election Audits: Restoring Trust in Elections , Aug. 2007 . http:\/\/www.brennancenter.org\/page\/-\/d\/download_file_ 50227 .pdf. L. Norden, A. Burstein, J. L. Hall, and M. Chen. Post-Election Audits: Restoring Trust in Elections, Aug. 2007. http:\/\/www.brennancenter.org\/page\/-\/d\/download_file_50227.pdf."},{"volume-title":"Stronger FPGA-based Voting Machine. In EVT\/WOTE '09: Proceedings of the 2009 USENIX\/Accurate Electronic Voting Technology Workshop \/ Workshop on Trustworthy Elections.","author":"\u00d6ks\u00fczo\u011flu E.","key":"e_1_3_2_1_22_1","unstructured":"E. \u00d6ks\u00fczo\u011flu and D. S. Wallach . VoteBox Nano: A Smaller , Stronger FPGA-based Voting Machine. In EVT\/WOTE '09: Proceedings of the 2009 USENIX\/Accurate Electronic Voting Technology Workshop \/ Workshop on Trustworthy Elections. E. \u00d6ks\u00fczo\u011flu and D. S. Wallach. VoteBox Nano: A Smaller, Stronger FPGA-based Voting Machine. In EVT\/WOTE '09: Proceedings of the 2009 USENIX\/Accurate Electronic Voting Technology Workshop \/ Workshop on Trustworthy Elections."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1977.32"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/11863908_20"},{"key":"e_1_3_2_1_25_1","volume-title":"USENIX Security Symposium. USENIX Association","author":"Sandler D.","year":"2008","unstructured":"D. Sandler , K. Derr , and D. S. Wallach . VoteBox: a tamper-evident, verifiable electronic voting system . In USENIX Security Symposium. USENIX Association , 2008 . D. Sandler, K. Derr, and D. S. Wallach. VoteBox: a tamper-evident, verifiable electronic voting system. In USENIX Security Symposium. USENIX Association, 2008."},{"key":"e_1_3_2_1_26_1","volume-title":"USENIX Security Symposium","author":"Sastry N.","year":"2006","unstructured":"N. Sastry , T. Kohno , and D. Wagner . Designing voting machines for verification . In USENIX Security Symposium , 2006 . N. Sastry, T. Kohno, and D. Wagner. Designing voting machines for verification. In USENIX Security Symposium, 2006."},{"volume-title":"EVT'07: Proceedings of the 2007 USENIX\/Accurate Electronic Voting Technology Workshop.","author":"Yee MK.-P.","key":"e_1_3_2_1_28_1","unstructured":"MK.-P. Yee . Extending prerendered-interface voting software to support accessibility and other ballot features . In EVT'07: Proceedings of the 2007 USENIX\/Accurate Electronic Voting Technology Workshop. MK.-P. Yee. Extending prerendered-interface voting software to support accessibility and other ballot features. In EVT'07: Proceedings of the 2007 USENIX\/Accurate Electronic Voting Technology Workshop."},{"volume-title":"EVT'06: Proceedings of the 2006 USENIX\/Accurate Electronic Voting Technology Workshop.","author":"Yee K.-P.","key":"e_1_3_2_1_30_1","unstructured":"K.-P. Yee , D. Wagner , M. Hearst , and S. M. Bellovin . Prerendered user interfaces for higher-assurance electronic voting . In EVT'06: Proceedings of the 2006 USENIX\/Accurate Electronic Voting Technology Workshop. K.-P. Yee, D. Wagner, M. Hearst, and S. M. Bellovin. Prerendered user interfaces for higher-assurance electronic voting. In EVT'06: Proceedings of the 2006 USENIX\/Accurate Electronic Voting Technology Workshop."},{"key":"e_1_3_2_1_31_1","unstructured":"Yices SMT solver. http:\/\/yices.csl.sri.com\/.  Yices SMT solver. http:\/\/yices.csl.sri.com\/."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.5555\/648238.751563"}],"event":{"name":"CCS '09: 16th ACM Conference on Computer and Communications Security 2009","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Chicago Illinois USA","acronym":"CCS '09"},"container-title":["Proceedings of the 16th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1653662.1653719","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1653662.1653719","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:38:53Z","timestamp":1750253933000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1653662.1653719"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,11,9]]},"references-count":28,"alternative-id":["10.1145\/1653662.1653719","10.1145\/1653662"],"URL":"https:\/\/doi.org\/10.1145\/1653662.1653719","relation":{},"subject":[],"published":{"date-parts":[[2009,11,9]]},"assertion":[{"value":"2009-11-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}