Re: [election-services] GAO report on election system security

["Simon Bain" <sibain@tendotzero.com>]

David hi.

Are these not the same fears that users had for online banking?

Which although there are headline cases, has proved to be very securre.
With the majority of bank accounts in the UK at least now having online
access.

I think the biggest hurdle for electonic voting is user perception. So
training / education would be a large part of any installation. Just as it
was when we first had the ballot box, which (although before my time) I
believe people were very distrusting of.

Cheers

Simon
-- 
Simon Bain
TENdotZERO
Mobile: 07793 769 846
Office: 0845 056 3377 - 44 (0) 1234 359090
Fax:    44 (0) 208 882 9411

<quote who="David RR Webber \(XML\)">
>  The GAO produces 107 page report on security of voting systems  The GAO
> has released a 107 page on the security of voting systems today.
>
> What the GAO found -
>
> "While electronic voting systems hold promise for improving the election
> process, numerous entities have raised concerns about their security and
> reliability, citing instances of weak security controls, system design
> flaws,
> inadequate system version control, inadequate security testing, incorrect
> system configuration, poor security management, and vague or incomplete
> voting system standards."
>
> Examples of Voting System Vulnerabilities and Problems:
>
> • Cast ballots, ballot definition files, and audit logs could be modified.
> • Supervisor functions were protected with weak or easily guessed
> passwords.
> • Systems had easily picked locks and power switches that were exposed and
> unprotected.
> • Local jurisdictions misconfigured their electronic voting systems,
> leading to election day problems.
> • Voting systems experienced operational failures during elections.
> • Vendors installed uncertified electronic voting systems.
>
> The full 107 report is here.
> --------------------------------------------------------------------- To
> unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  You may a link to this group and all your TCs in
> OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php