Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:

 

Internet voting system set for upcoming elections not secure, computer experts say

23.01.2004


A federally funded online absentee voting system scheduled to debut in less than two weeks has security vulnerabilities that could jeopardize voter privacy and allow votes to be altered, according to a report prepared by four prominent researchers invited to analyze the system. All experts in cyber-security, they say the risks associated with Internet voting cannot be eliminated and urge that the system be shut down.



The report’s authors are computer scientists David Wagner, Avi Rubin and David Jefferson from the University of California, Berkeley, The Johns Hopkins University and the Lawrence Livermore National Laboratory, respectively, and Barbara Simons, a computer scientist and leading technology policy consultant. They are members of the Security Peer Review Group, an advisory group formed by the Federal Voting Assistance Program to evaluate the system.

Administrators of this program, part of the U.S. Department of Defense, were charged with finding an easier way for U.S. military personnel and overseas civilians to vote in their home districts. Currently, these voters must rely on absentee paper ballots. But obtaining and returning paper ballot from a distant location can be a frustrating process that sometimes depends on slow or unreliable foreign postal services.


As an alternative, the federal program funded the creation of an Internet-based voting system called the Secure Electronic Registration and Voting Experiment, or SERVE. The system is slated to be used in 50 counties in seven states during this year’s primary and general elections, handling up to 100,000 votes. The first tryout is Feb. 3 for South Carolina’s presidential primary. The eventual goal is to provide voting services to all eligible overseas citizens, plus military personnel and their dependents, a population estimated at 6 million.

While acknowledging the difficulties facing such absentee voters, the authors of the security analysis conclude that Internet voting presents far too many opportunities for hackers or even terrorists to interfere with fair and accurate voting, potentially in ways impossible to detect. Such tampering could alter election results, particularly in close contests.

"Because the danger of successful large-scale attacks is so great, we reluctantly recommend shutting down the development of SERVE and not attempting anything like it in the future until both the Internet and the world’s home computer infrastructure have been fundamentally redesigned, or some other unforeseen security breakthroughs appear," the report states.

The authors of the report state that there is no way to plug the security vulnerabilities inherent in the SERVE online voting design.

"The flaws are unsolvable because they are fundamental to the architecture of the Internet," says Wagner, assistant professor of computer science at UC Berkeley. "Using a voting system based upon the Internet poses a serious and unacceptable risk for election fraud. It is simply not secure enough for something as serious as the election of a government official."

The researchers also believe that if no mishaps occur or are detected during this year’s trial runs with the online voting system, federal or state governments might swiftly expand its use.

"The danger is that this system will work fine in a low-stakes setting like these first trial runs," says Rubin, technical director of the Information Security Institute at Johns Hopkins and an associate professor of computer science. "That will likely be used as an argument for expanding the system for even wider use. But that’s like saying you don’t ever need to wear a seat belt because you drove to work without crashing the car this morning."

The Internet voting plan, along with the growing use of touchscreen equipment not linked to the Internet, is part of a nationwide move toward greater use of computers, provoked in part by the problems associated with paper ballots during the 2000 presidential election. But the authors of the SERVE analysis conclude that opportunities for tampering are being overlooked in the rush to embrace new election technology.

"The SERVE system has all of the problems that electronic touchscreen voting systems have: secret software, no protection against insider fraud and lack of voter verifiability," says Jefferson. "But it also has a host of additional security vulnerabilities associated with the PC and the Internet, including denial-of-service attacks, automated vote buying and selling, spoofing attacks and virus attacks."

As currently implemented, certain members of the U.S. Armed Forces, the Merchant Marines, the Public Health Service and the National Oceanic and Atmospheric Administration, as well as U.S. citizens living abroad, are eligible to vote using SERVE. Such voters can go to the SERVE Web site using a Windows-based computer connected to the Internet and cast their ballots.

After studying the prototype system, however, the four researchers said it would be too easy for a hacker, located anywhere in the world, to disrupt an election or influence its outcome by employing any of several common types of cyber-attacks:

* A denial-of-service attack, which would delay or prevent a voter from casting a ballot through the SERVE Web site.
* A "Man in the Middle" or "spoofing" attack, in which a hacker would insert a phony Web page between the voter and the authentic server to prevent the vote from being counted or to alter the voter’s choice. What is particularly problematic, the authors say, is that victims of "spoofing" may never know that their votes were not counted.
* Use of a virus or other malicious software on the voter’s computer to allow an outside party to monitor or modify a voter’s choices. The malicious software might then erase itself and never be detected.

"Voting in a national election will be conducted using proprietary software, insecure clients and an insecure network," says Simons, a former IBM Research Staff Member and a past president of the Association for Computing Machinery. "Congress and the Department of Defense should understand that providing soldiers with an insecure system on which to vote is not doing them any favors."

Sarah Yang | UC Berkeley
Further information:
http://www.berkeley.edu/news/media/releases/2004/01/21_vote.shtml
http://www.servesecurityreport.org/
http://www.serveusa.gov/public/aca.aspx/

More articles from Communications Media:

nachricht New Technologies for A/V Analysis and Search
13.04.2017 | Fraunhofer-Institut für Digitale Medientechnologie IDMT

nachricht On patrol in social networks
25.01.2017 | Fraunhofer-Institut für Arbeitswirtschaft und Organisation IAO

All articles from Communications Media >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: Nanoparticles help with malaria diagnosis – new rapid test in development

The WHO reports an estimated 429,000 malaria deaths each year. The disease mostly affects tropical and subtropical regions and in particular the African continent. The Fraunhofer Institute for Silicate Research ISC teamed up with the Fraunhofer Institute for Molecular Biology and Applied Ecology IME and the Institute of Tropical Medicine at the University of Tübingen for a new test method to detect malaria parasites in blood. The idea of the research project “NanoFRET” is to develop a highly sensitive and reliable rapid diagnostic test so that patient treatment can begin as early as possible.

Malaria is caused by parasites transmitted by mosquito bite. The most dangerous form of malaria is malaria tropica. Left untreated, it is fatal in most cases....

Im Focus: A “cosmic snake” reveals the structure of remote galaxies

The formation of stars in distant galaxies is still largely unexplored. For the first time, astron-omers at the University of Geneva have now been able to closely observe a star system six billion light-years away. In doing so, they are confirming earlier simulations made by the University of Zurich. One special effect is made possible by the multiple reflections of images that run through the cosmos like a snake.

Today, astronomers have a pretty accurate idea of how stars were formed in the recent cosmic past. But do these laws also apply to older galaxies? For around a...

Im Focus: Visual intelligence is not the same as IQ

Just because someone is smart and well-motivated doesn't mean he or she can learn the visual skills needed to excel at tasks like matching fingerprints, interpreting medical X-rays, keeping track of aircraft on radar displays or forensic face matching.

That is the implication of a new study which shows for the first time that there is a broad range of differences in people's visual ability and that these...

Im Focus: Novel Nano-CT device creates high-resolution 3D-X-rays of tiny velvet worm legs

Computer Tomography (CT) is a standard procedure in hospitals, but so far, the technology has not been suitable for imaging extremely small objects. In PNAS, a team from the Technical University of Munich (TUM) describes a Nano-CT device that creates three-dimensional x-ray images at resolutions up to 100 nanometers. The first test application: Together with colleagues from the University of Kassel and Helmholtz-Zentrum Geesthacht the researchers analyzed the locomotory system of a velvet worm.

During a CT analysis, the object under investigation is x-rayed and a detector measures the respective amount of radiation absorbed from various angles....

Im Focus: Researchers Develop Data Bus for Quantum Computer

The quantum world is fragile; error correction codes are needed to protect the information stored in a quantum object from the deteriorating effects of noise. Quantum physicists in Innsbruck have developed a protocol to pass quantum information between differently encoded building blocks of a future quantum computer, such as processors and memories. Scientists may use this protocol in the future to build a data bus for quantum computers. The researchers have published their work in the journal Nature Communications.

Future quantum computers will be able to solve problems where conventional computers fail today. We are still far away from any large-scale implementation,...

All Focus news of the innovation-report >>>

Anzeige

Anzeige

Event News

Ecology Across Borders: International conference brings together 1,500 ecologists

15.11.2017 | Event News

Road into laboratory: Users discuss biaxial fatigue-testing for car and truck wheel

15.11.2017 | Event News

#Berlin5GWeek: The right network for Industry 4.0

30.10.2017 | Event News

 
Latest News

From Hannover around the world and to the Mars: LZH delivers laser for ExoMars 2020

21.11.2017 | Physics and Astronomy

Borophene shines alone as 2-D plasmonic material

21.11.2017 | Materials Sciences

Penn study identifies new malaria parasites in wild bonobos

21.11.2017 | Health and Medicine

VideoLinks
B2B-VideoLinks
More VideoLinks >>>