Presentation on theme: "Electronic Voting Systems"— Presentation transcript:
1 Electronic Voting Systems Diana LopezVarun SehgalMichael Chua
2 Presentation Outline Introduction: Security Issues Social Issues What is e-voting?Problem / ControversySecurity IssuesSocial IssuesConclusionProposed SolutionsResearch ThesisWhat is e-voting?- Background and history.- Kinds of voting machines.- Which states use them? Countries?Technical side- Analysis of problem.- Software threats?- Hardware threats?Social side- Why it’s important.- Countries that are open-minded about e-voting and the ones are close-minded.- Year 2000 elections, controversy.
3 What is E-Voting?E-voting is an election system that allows a voter to record his or her secure and secret ballot electronically.
4 DRE Voting SystemA DRE machine directly records the voter’s selections in each contest, using a ballot that appears on a display screen.
5 Evolution of DREs They are divided into 3 types: Similar to lever machinesDisplay typeDisplay type using touch screen
6 Controversies & Problems Voter & Data Privacy/SecuritySystem Vulnerable to IntrusionSoftware IntrusionHardware IntrusionNo Verifiable Paper Trail
7 Security Issues of DREs Attacks Divided into 2 groups:Vote TamperingMulti-CastVote StealingDenial-of-ServiceDenied AccessSpoiled Data
8 Security Issues of DREs (cont.) Common Exploits in Attack PatternsSmartcard/Memory CardImproper Handling/Securing of DataPoor System Design
9 Vote Tampering Gaining Access to the Machine Duplicated or Stolen SmartcardReprogramming Flash MemoryMemory CardLearn Protocol or Code InjectionReverse Engineering ProtocolComputer Virus or Buffer Overflow
10 Denial-of-Service Gaining Access to the Machine Crash System Same as vote tamperingCrash SystemTime/Date program triggerCorrupt Vote DataSame techniques as vote tampering
11 Social Issues of E-Voting Why is it important?It is equally important as the technical side.Social aspects of e-voting is important because if in any election the machines do get hacked, they could trigger the elections and the outcome.It is the way society thinks about e-voting.People have started to be aware about the problem.- It is equally important as the technical side.- Social aspects of e-voting is important because if in any election the machines do get hacked, they could trigger the elections and the outcome.- It is the way society thinks about e-voting.- People have started to be aware about the problem.
12 Social Issues of E-Voting (cont.) Countries that use electronic voting machines:- USA, UK, France, Germany, Australia, Netherlands, India, Brazil, Switzerland, Spain, Portugal, Norway, Ireland, Estonia, Canada, Belgium, Austria.- It becoming more and more popular…..
13 Social Issues of E-Voting (cont.) Since so many countries have invested into e-voting, they are hesitant to drop it and go back to paper ballots.It’s becoming more and more popular.It is the direction we are heading to.- Since most of developed and developing nations are using electronic voting machines, this is the direction we a re heading to.
14 Possible Solutions Some theoretical solutions. Use open-source softwareUse voter-verifiable paper ballotEncrypted votesParallel testingLegislation
15 Use Open-Source Software Some experts believe that the code should be available for public inspection.It will undergo thorough inspection.Maybe, some security flaws can be fixed by this method.
16 Voter-Verifiable Paper Ballot The computer would print a paper ballot.Voter would then verify that the ballot accurately reflected the voter’s choice made on the DRE machine.This way, no votes will be improperly changed.Disadvantage: “Show your receipt that you voted for X candidate, and here is your free gift.”
17 Encrypted VotesVotes will be independently recorded on an independent machine other than the DRE.This way a recount can be done to make sure the votes recorded on the DRE were accurate or not.The recount will be faster than the paper ballot verification.
18 Parallel TestingParallel testing is when election officials take some DRE machines and set them aside during an election.All day, they cast votes simultaneously and at the end of the day, they tally their votes.
19 Legislation Funding for research to improve DRE machines. Adding more requirements for the DRE machines in order for it to be used in elections.Legislative solution may be more useful if controversy is not resolved by other means.
20 Our Own SolutionBecause everything is so secret, no one really knows how they are implementing the solutions.Since it is theoretical, there really isn’t a significant solution to the problem.OUR SOLUTION is to use the seven touchpoints of software security.
21 Conclusion Should e-voting be used or not? There are many advantages to e-voting but the problems with the systems overrule the advantages.E-voting machines are unreliable.Even with all the security problems there is a growing trend among countries to invest more into e-voting machines.Solutions deal with fixing the code after implementation.Our solution is to take it out and fix and not while it’s still being used.Basically, rebuild from scratch….but because so much money has been invested in them, they would not do that.
22 Conclusion Ireland – Stopped using them unless machines are upgraded. France – considering.This could also be a trend about to begin.Countries might start going back to paper ballots.UNLESS WE FIX THE PROBLEMS RELATED TO E-VOTING MACHINES!