After the Estonian Parliamentary Elections held in 2011, an additional verification mechanism was integrated into the i-voting system in order to resist corrupted voting devices, including the so called Student’s Attack where a student practically showed that the voting system is indeed not verifiable by developing several versions of malware capable of blocking or even changing the vote. This ...

Embedded real-time applications are often built from scratch on a trial-and-error basis, which leads to sub-optimal designs with latent errors that are not detectable in early stages of use or deployment and often incurs prolonged time-to-market. A new application framework called Verifiable Embedded Real-Time Application Framework (VERTAF) is proposed for embedded real-time application develop...

The combination of software-as-a-service and the increasing use of mobile devices gives rise to a considerable difference in computational power between servers and clients. Thus, there is a desire for clients to outsource the evaluation of complex functions to an external server. Servers providing such a service may be rewarded per computation, and as such have an incentive to cheat by returni...

Broadbent and Islam (TCC '20) proposed a quantum cryptographic primitive called encryption with certified deletion. In this primitive, receiver in possession of ciphertext can generate classical certificate that the encrypted message is deleted. Although their construction information-theoretically secure, it limited to setting one-time symmetric key (SKE), where sender have share common advanc...

Compared to test or simulation, formal verification poses an attractive way by either guaranteeing the correctness of the system or generating a counter example to indicate the violation. However, due to state explosion, the power of formal verification is usually restricted to trivial systems. This project is motivated by two observations of Networked Embedded Systems: a) due to limited physic...

In this paper we introduce Stratway, a modular approach to finding long-term strategic resolutions to conflicts between aircraft. The modular approach provides both advantages and disadvantages. Our primary concern is to investigate the implications on the verification of safety-critical properties of a strategic resolution algorithm. By partitioning the problem into verifiable modules much str...