Dr James Heather
Senior Lecturer
Qualifications: BA (Oxon) MSc (Oxon) PhD (Lond)
Email: j.heather@surrey.ac.uk
Phone: Work: 01483 68 9636
Room no: 05 BB 02
Office hours
Thursdays, 2pm to 4pm
Further information
Research Interests
My main focus is on the application of formal methods to computer security problems.
For the first part of my career, this largely involved analysing security protocols using the process algebra CSP, and either finding attacks or proving that no attacks existed.
More recently I have spent most of my time working on secure electronic voting. I am leading the EPSRC-funded Trustworthy Voting Systems research project at Surrey, which aims to design, develop and verify a secure voting system that is strong enough and usable enough for real-world elections. The project is joint work with Birmingham, and run in close collaboration with Luxembourg.
Publications
Highlights
- .
(2011) 'On the Side-Effects of Introducing E-voting'. Tallinn, Estonia: VoteID 2011
[ Status: Accepted ] - .
(2011) 'Prêt à Voter with Write-Ins'. Tallinn, Estonia: VoteID 2011
[ Status: Accepted ] - . (2010) 'Pretty Good Democracy for More Expressive Voting Schemes'. SPRINGER-VERLAG BERLIN COMPUTER SECURITY-ESORICS 2010, Athens, GREECE: 6345, pp. 405-423.
- .
(2009) 'The Prêt à Voter Verifiable Election System'. IEEE IEEE Transactions on Information Forensics and Security, 4 (4), pp. 662-673.Full text is available at: http://epubs.surrey.ac.uk/7244/
- . (2009) 'The Append-Only Web Bulletin Board'. SPRINGER-VERLAG BERLIN FORMAL ASPECTS IN SECURITY AND TRUST, Malaga, SPAIN: 5491, pp. 242-256.
Journal articles
- . (2010) 'Pretty Good Democracy for More Expressive Voting Schemes'. SPRINGER-VERLAG BERLIN COMPUTER SECURITY-ESORICS 2010, Athens, GREECE: 6345, pp. 405-423.
- . (2010) 'Turnitoff: Identifying and fixing a hole in current plagiarism detection software'. Assessment and Evaluation in Higher Education, 35 (6), pp. 647-660.
- .
(2009) 'The Prêt à Voter Verifiable Election System'. IEEE IEEE Transactions on Information Forensics and Security, 4 (4), pp. 662-673.Full text is available at: http://epubs.surrey.ac.uk/7244/
- . (2009) 'The Append-Only Web Bulletin Board'. SPRINGER-VERLAG BERLIN FORMAL ASPECTS IN SECURITY AND TRUST, Malaga, SPAIN: 5491, pp. 242-256.
- .
(2009) 'Where next for formal methods?'. Springer Lecture Notes in Computer Science, 5087, pp. 52-58.Full text is available at: http://epubs.surrey.ac.uk/107397/
- . (2009) 'Where next for formal methods? (Transcript of Discussion)'. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 5087 LNCS, pp. 59-61.
- . (2007) 'Implementing STV securely in Prêt à Voter'. Proceedings - IEEE Computer Security Foundations Symposium, , pp. 157-169.
- . (2007) 'A theorem-proving approach to verification of fair non-repudiation protocols'. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 4691 LNCS, pp. 202-219.
- . (2006) 'Towards verification of timed non-repudiation protocols'. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 3866 LNCS, pp. 244-257.
- . (2005) 'Programmable agents for generic distributed authorisation'. Proceedings of the 2005 International Conference on Internet Computing, ICOMP'05, , pp. 174-180.
- . (2005) 'Embedding the stable failures model of CSP in PVS'. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 3771 LNCS, pp. 246-265.
- . (2005) 'A decision procedure for the existence of a rank function'. Journal of Computer Security, 13 (2), pp. 317-344.
- . (2003) 'How to prevent type flaw attacks on security protocols'. Journal of Computer Security, 11 (2), pp. 217-244.
Conference papers
- .
(2011) 'On the Side-Effects of Introducing E-voting'. Tallinn, Estonia: VoteID 2011
[ Status: Accepted ] - .
(2011) 'Prêt à Voter with Write-Ins'. Tallinn, Estonia: VoteID 2011
[ Status: Accepted ] - .
(2011) 'Authentication Codes'. San Francisco: EVT/WOTE 2011
[ Status: Accepted ] - . (2011) 'Cryptographic Protocols with Everyday Objects'. Limerick: CryptoForma 2011
- . (2011) 'Anonymity and CSP for Voting Systems'. Limerick: CryptoForma 2011
- . (2011) 'Focus group views on Prêt à Voter 1.0'. Proc. of 2011 Int. Workshop on Requirements Engineering for Electronic Voting Systems, REVOTE 2011 - In Conjunction with the 19th IEEE International Requirements Engineering Conference 2011, RE 2011, , pp. 56-65.
- .
(2010) 'Versatile Pret a Voter: Handling Multiple Election Methods with a Unified Interface'. Springer-Verlag Lecture Notes in Computer Science, Hyderabad, India: Indocrypt 6498, pp. 98-114.Full text is available at: http://epubs.surrey.ac.uk/7233/
- .
(2009) 'Experiences gained from the first Prêt à Voter implementation'. 2009 1st International Workshop on Requirements Engineering for e-Voting Systems, RE-VOTE 2009, , pp. 19-28.Full text is available at: http://epubs.surrey.ac.uk/7211/
- .
(2008) 'Analysis, Improvement, and Simplification of Prêt à Voter with Paillier Encryption.'. USENIX Association EVT, Full text is available at: http://epubs.surrey.ac.uk/7188/
- . (2007) 'Prêt à Voter: All-in-one'. Ottawa, Canada : IAVoSS Workshop On Trustworthy Elections (WOTE 2007),
- . (2006) 'Tear and Destroy: Chain voting and destruction problems shared by Prêt à Voter and Punchscan and a solution using Visual Encryption'. Hamburg, Germany : IAVoSS Workshop on Frontiers in Electronic Elections (FEE 2006),
- . (2006) 'Distributed Creation of the Ballot Form in Prêt à Voter using an element of Visual Encryption'. Cambridge, UK : IAVoSS Workshop On Trustworthy Elections (WOTE 2006),
- . (2006) 'Tear and Destroy: Chain voting and destruction problems shared by Prêt à Voter and Punchscan and a solution using Visual Encryption'. EATCS Fundamenta Informaticae (Journal of Fundamental Informatics), , pp. 1001-1019.
- . (2006) 'To infinity and beyond or, avoiding the infinite in security protocol analysis'. Proceedings of the ACM Symposium on Applied Computing, 1, pp. 346-353.
