Symposium sur la sécurité des technologies de l'information et des communications

Conférence francophone sur le thème de la sécurité de l'information.
Elle se déroulera à Rennes du 5 au 7 juin 2024.

Belenios: the Certification CampaignAngèle Bossuat, Eloïse Brocas, Nicolas Kovacs, Pierrick Gaudry, Stéphane Glondu, Véronique Cortier

Date : 07 June 2024 à 15:15 — 15 min.

This article presents our work on the security evalutation of the Belenios voting solution as a Certification de Sécurité de Premier Niveau, the French simple alternative to Common Criteria. We present the steps taken by the LORIA, who designed Belenios, and Quarkslab, who carried out the evaluation, as well as our exchanges with the ANSSI, who coordinated everything.

We also hope to start a more general discussion on how to evaluate the security of e-voting systems in practice, as they are difficult to compare with other types of software, and any vulnerability may have an impact at a large scale.