220 likes | 429 Views
Diana Lopez Varun Sehgal Michael Chua. Electronic Voting Systems. Presentation Outline. Introduction : What is e-voting? Problem / Controversy Security Issues Social Issues Conclusion Proposed Solutions Research Thesis. What is E-Voting?.
E N D
Diana Lopez Varun Sehgal Michael Chua Electronic Voting Systems
Presentation Outline Introduction: What is e-voting? Problem / Controversy Security Issues Social Issues Conclusion Proposed Solutions Research Thesis
What is E-Voting? • E-voting is an election system that allows a voter to record his or her secure and secret ballot electronically.
DRE Voting System A DRE machine directly records the voter’s selections in each contest, using a ballot that appears on a display screen.
Evolution of DREs They are divided into 3 types: Similar to lever machines Display type Display type using touch screen
Controversies & Problems • Voter & Data Privacy/Security • System Vulnerable to Intrusion • Software Intrusion • Hardware Intrusion • No Verifiable Paper Trail
Security Issues of DREs Attacks Divided into 2 groups: Vote Tampering Multi-Cast Vote Stealing Denial-of-Service Denied Access Spoiled Data
Security Issues of DREs (cont.) Common Exploits in Attack Patterns Smartcard/Memory Card Improper Handling/Securing of Data Poor System Design
Vote Tampering • Gaining Access to the Machine • Duplicated or Stolen Smartcard • Reprogramming Flash Memory • Memory Card • Learn Protocol or Code Injection • Reverse Engineering Protocol • Computer Virus or Buffer Overflow
Denial-of-Service • Gaining Access to the Machine • Same as vote tampering • Crash System • Time/Date program trigger • Corrupt Vote Data • Same techniques as vote tampering
Social Issues of E-Voting Why is it important? It is equally important as the technical side. Social aspects of e-voting is important because if in any election the machines do get hacked, they could trigger the elections and the outcome. It is the way society thinks about e-voting. People have started to be aware about the problem.
Social Issues of E-Voting (cont.) Countries that use electronic voting machines: - USA, UK, France, Germany, Australia, Netherlands, India, Brazil, Switzerland, Spain, Portugal, Norway, Ireland, Estonia, Canada, Belgium, Austria.
Social Issues of E-Voting (cont.) Since so many countries have invested into e-voting, they are hesitant to drop it and go back to paper ballots. It’s becoming more and more popular. It is the direction we are heading to.
Possible Solutions Some theoretical solutions. Use open-source software Use voter-verifiable paper ballot Encrypted votes Parallel testing Legislation
Use Open-Source Software • Some experts believe that the code should be available for public inspection. • It will undergo thorough inspection. • Maybe, some security flaws can be fixed by this method.
Voter-Verifiable Paper Ballot • The computer would print a paper ballot. • Voter would then verify that the ballot accurately reflected the voter’s choice made on the DRE machine. • This way, no votes will be improperly changed. • Disadvantage: “Show your receipt that you voted for X candidate, and here is your free gift.”
Encrypted Votes • Votes will be independently recorded on an independent machine other than the DRE. • This way a recount can be done to make sure the votes recorded on the DRE were accurate or not. • The recount will be faster than the paper ballot verification.
Parallel Testing • Parallel testing is when election officials take some DRE machines and set them aside during an election. • All day, they cast votes simultaneously and at the end of the day, they tally their votes.
Legislation • Funding for research to improve DRE machines. • Adding more requirements for the DRE machines in order for it to be used in elections. • Legislative solution may be more useful if controversy is not resolved by other means.
Our Own Solution Because everything is so secret, no one really knows how they are implementing the solutions. Since it is theoretical, there really isn’t a significant solution to the problem. OUR SOLUTION is to use the seven touchpoints of software security.
Conclusion Should e-voting be used or not? There are many advantages to e-voting but the problems with the systems overrule the advantages. E-voting machines are unreliable. Even with all the security problems there is a growing trend among countries to invest more into e-voting machines.
Conclusion Ireland – Stopped using them unless machines are upgraded. France – considering. This could also be a trend about to begin. Countries might start going back to paper ballots. UNLESS WE FIX THE PROBLEMS RELATED TO E-VOTING MACHINES!