Connecting Work on Threat Analysis to the Real World

As a prefatory remark, I should note that I initially hesitated to present this paper because it names vendors and describes long-standing problems with some of their products. But there is no way around this. If we cannot speak about real systems and real threats here, where can we speak about them? In any event, while products made by Diebold feature prominently here, they are not the only vendor I mention, and my intent is to focus on the larger system that allowed these problems to persist years after they were first uncovered, not to focus on the particular vendors that were responsible for these problems in the first place.