1 / 12

E-Voting in CA Original Author: Alan Huch September 12, 2007

E-Voting in CA Original Author: Alan Huch September 12, 2007. Secretary of State.

koto
Download Presentation

E-Voting in CA Original Author: Alan Huch September 12, 2007

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. E-Voting in CA Original Author: Alan HuchSeptember 12, 2007

  2. Secretary of State “Democracy, by definition, is about free, fair and open elections. “My goal is to have election results that are beyond question or doubt. Right now, far too many voters are wondering about the accuracy of California’s election results. We have three statewide elections next year, which makes it even more essential that our voting equipment be secure, accurate, reliable and accessible.” Debra Bowen, Secretary of State, California, 2007

  3. The Players • Allen, Texas • Austin, Texas • Denver, CO • Omaha, NE

  4. The Vulnerabilities • 45 • 30 • 92 • Refused!

  5. The Impacts • Certifications • Arbitrary election results • Election Results are questionable • Other states joining the hunt • Employees • Egg • $$

  6. Certifications • Diebold • decertified/conditionally recertified • Hart • decertified/conditionally recertified • Sequoia • decertified/conditionally recertified • ES&S • decertified

  7. Arbitrary election results • Diebold Potential Attack 1 • Paperclip in the card reader goes to setup menu • Retrieves credentials • Logins to the Jet database • Has fun

  8. Arbitrary election results • Hart Potential Attack 3 • Reflashes eScan software • New SW uploads trojan to server • Server distributes to entire system • Next election is 0wned

  9. Arbitrary election results • Sequoia Potential Attack 7 • Insider directly connects MS SQL • Bypassing all access controls • Loads Trojan in database • Loads Trojan on server

  10. Election Results are questionable • "virus did it" • Avi Rubin, 8/26/7 Blog

  11. The Grassy Knoll • Chuck Hagel • ES&S Chairman until 1995 • 1995 Nebraska Senate Race • ES&S machines count 85% of the votes • 15 % were counted by hand • Sen. Chuck Hagel (R-Neb) won the race with 56% of the vote • Historically Democratic state • Polls estimated 18% of the vote • Still owned about 1.5 % share in ES&S • http://www.wired.com/politics/security/news/2004/03/62790

  12. Key References • http://www.sos.ca.gov/elections/elections_vsr.htm • http://www.sos.ca.gov/elections/voting_systems/ttbr/diebold-source-public-jul29.pdf • http://www.sos.ca.gov/elections/voting_systems/ttbr/Hart-source-public.pdf • http://www.sos.ca.gov/elections/voting_systems/ttbr/sequoia-source-public-jul26.pdf

More Related