E-Voting System Has Security Risks - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
News

E-Voting System Has Security Risks

Security researchers say Diebold's electronic voting system is vulnerable to tampering, but can be fixed by election day.

Election insiders and hackers could disrupt or corrupt elections held using electronic voting machines made by Diebold Inc., according to a report presented to Maryland state legislators on Thursday. Diebold, however, says the report validates the security of their electronic voting systems. "Not only can many of the issues be mitigated by March, many have been already," says a Diebold spokesman. Maryland voters should not be concerned about the security or accuracy of the votes they cast electronically next month, he says.

The maker of electronic voting systems already has strengthened security by improving how the system handles passwords and by enhancing the encryption the system uses, the spokesman says.

The analysis of the voting system was conducted by RABA Technologies and made available on the Internet on Friday. The report concludes that while vulnerabilities exist, they can be fixed in time for Maryland's primary election in March. The report was prepared after RABA Technologies had security experts attempt to hack the system under actual election conditions.

Among the security concerns: Servers used in the test didn't have the most current Microsoft patches in place, leaving the systems up to potential attack. Also, easily guessed passwords made it possible to reveal the contents of smart cards used in the election process. Plus, the security team was able to use lock-picks to crack open a voting machine in about 10 seconds. The report also warned that someone using a standard handheld computer could alter the software to destroy or scramble results.

The report made it clear that all the vulnerabilities it cited could be fixed, but that an auditable paper trail of votes cast electronically should become a requirement.

"With all these near-term recommendations in place, we feel for this primary that the system will accurately render the election and is worthy of voter trust," the report stated. "However, between the March and November elections, we strongly feel that additional actions must be taken to mitigate increasing risks incumbent on a system that will receive broad scrutiny. Ultimately, we feel there will be a need for paper receipts, at least in a limited fashion."

Concerns raised about the security of electronic voting systems has sparked legislators at the state and federal levels to draft laws that would require auditable paper trails for all votes cast electronically. "It just makes sense to have something you can verify," says one state election official in California.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
The State of IT & Cybersecurity Operations 2020
The State of IT & Cybersecurity Operations 2020
Download this report from InformationWeek, in partnership with Dark Reading, to learn more about how today's IT operations teams work with cybersecurity operations, what technologies they are using, and how they communicate and share responsibility--or create risk by failing to do so. Get it now!
Slideshows
IT Careers: 10 Industries with Job Openings Right Now
Cynthia Harvey, Freelance Journalist, InformationWeek,  5/27/2020
Commentary
How 5G Rollout May Benefit Businesses More than Consumers
Joao-Pierre S. Ruth, Senior Writer,  5/21/2020
News
IT Leadership in Education: Getting Online School Right
Jessica Davis, Senior Editor, Enterprise Apps,  5/20/2020
Register for InformationWeek Newsletters
Video
Current Issue
Key to Cloud Success: The Right Management
This IT Trend highlights some of the steps IT teams can take to keep their cloud environments running in a safe, efficient manner.
White Papers
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll