2018-annual-report

AxE Javascript
Auditable E-voting using Javascript
65
Funding: Spanish Ministry of Economy, Industry, and Competitiveness
Duration: 2016-2018
Principal Investigator: Res. Prof. Gilles Barthe
The AxE Javascript Project aims to bring a solution to confidence problems in the field of security in electronic
voting systems through the development of e-voting software with the highest possible correctness and security
properties. Identifying and defining properties for security in e-voting systems and developing and implementing
new methods providing real evidence of correctness and security in e-voting systems, AxE Javascript project
aims to develop a solution for e-voting including the highest actually possible guarantees regarding code correctness
and security. This will allow a significant improvement in the transparency of e-voting systems used
by electoral organizations.
annual report
20
DataMantium
Computación y comunicaciones seguras en la nube
para entornos hostiles
Funding: Spanish Ministry of Economy, Industry, and Competitiveness
Duration: 2016-2018
Principal Investigators: Asst. Res. Prof. Dario Fiore – Res. Carmela Troncoso
The goal of DataMantium project is to develop security mechanisms to protect the integrity and privacy in
users data and processes in untrusted cloud scenarios. The results of the project totally aim at issues specially
relevant in cybersecurity and digital trust, such as cryptography, to protect the information’s confidentiality
and integrity and the development of communication technologies in private and secure networks.
RiskIoT
Sistema de monitorización proactiva en infraestructuras
críticas basado en tecnologías IoT
Funding: Regional Government of Madrid
Duration: 2017-2018
Principal Investigator: Asst. Res. Prof. Alessandra Gorla
The possibility of almost instantaneously sharing data in the IoT world gives unprecedented power and, at the same
time, poses great security and access control threats. It is therefore necessary to furnish new means to securely
exchange data and events between the virtual and physical world. RiskIoT addresses this problem for the case
of seaport environments, a critical infrastructure where a huge number of objects, companies, cameras, security
sensors, persons, etc. have to safely interact and exchange information while ensuring compliance with existing
legal regulations, including data provenance and privacy. The goal of RiskIoT is to provide a security middleware
to make this information transmission possible, without interruptions, and abiding by the applicable laws.