Computer scientists demonstrated that criminals could hack an electronic voting machine and steal votes using a malicious programming approach that had not been invented when the voting machine was designed.
The team of scientists from University of California, San Diego, the University of Michigan, and Princeton University employed “return-oriented programming” to force a Sequoia AVC Advantage electronic voting machine to turn against itself and steal votes.
“Voting machines must remain secure throughout their entire service lifetime, and this study demonstrates how a relatively new programming technique can be used to take control of a voting machine that was designed to resist takeover, but that did not anticipate this new kind of malicious programming,” said Hovav Shacham, a professor of computer science at UC San Diego’s Jacobs School of Engineering and an author on the new study presented on August 10, 2009 at the 2009 Electronic Voting Technology Workshop / Workshop on Trustworthy Elections (EVT/WOTE 2009), the premier academic forum for voting security research.
In 2007, Shacham first described return-oriented programming, which is a powerful systems security exploit that generates malicious behavior by combining short snippets of benign code already present in the system.
The new study demonstrates that return-oriented programming can be used to execute vote-stealing computations by taking control of a voting machine designed to prevent code injection. Shacham and UC San Diego computer science Ph.D. student Stephen Checkoway collaborated with researchers from Princeton University and the University of Michigan on this project.
“With this work, we hope to encourage further public dialog regarding what voting technologies can best ensure secure elections and what stop gap measures should be adopted if less than optimal systems are still in use,” said J. Alex Halderman, an electrical engineering and computer science professor at the University of Michigan.
The computer scientists had no access to the machine’s source code—or any other proprietary information—when designing the demonstration attack. By using just the information that would be available to anyone who bought or stole a voting machine, the researchers addressed a common criticism made against voting security researchers: that they enjoy unrealistic access to the systems they study.
“Based on our understanding of security and computer technology, it looks like paper-based elections are the way to go. Probably the best approach would involve fast optical scanners reading paper ballots. These kinds of paper-based systems are amenable to statistical audits, which is something the election security research community is shifting to,” said Shacham.
“You can actually run a modern and efficient election on paper that does not look like the Florida 2000 Presidential election,” said Shacham. “If you are using electronic voting machines, you need to have a separate paper record at the very least.”
The Latest on: Electronic voting machines
[google_news title=”” keyword=”electronic voting machines” num_posts=”10″ blurb_length=”0″ show_thumb=”left”]
via Google News
The Latest on: Electronic voting machines
- Public voting machine demonstrations scheduled for Friday at Osage Centreon May 6, 2024 at 10:09 pm
Election equipment companies will showcase the security and operations of their latest machines during hourlong public demonstrations.
- Oklahoma's current voting machines are not going to last forever. They will need replacingon May 5, 2024 at 4:03 am
For almost four decades, Oklahoma has had a national reputation as a leader in holding free and fair elections ― safe from voter fraud and with every ballot counted accurately and securely.
- Tarrant County voters redirected to other centers as voting machines down, sources sayon May 4, 2024 at 1:40 pm
Tarrant County voters for Saturday’s election had to be redirected to nearby voting centers as voting machines were not working, according to city officials. In an update posted on Facebook at 1 p.m., ...
- LISTEN: Know the News - Election Security and Voting Machines in Northwest Arkansason May 3, 2024 at 9:57 am
In this episode of the Know the News podcast, host Greg Harton speaks with Jennifer Price, executive director of the Washington County Election Commission, on the issue of security related to ...
- Early voting off to a 'slow start:' Only 297 ballots cast in Mercer, but new voting machines a 'big hit'on May 2, 2024 at 4:48 am
Nearly 300 of Mercer County's registered voters headed for the polls Wednesday and cast their ballots on new machines as early voting got underway for the 2024 Primary Election in West Virginia. Early ...
- New voting machines ready: Mercer County to use 162 new voting machines for first time on May 14on April 27, 2024 at 2:00 am
Unfamiliar quickly became familiar Friday when county officials and the public tried out the new voting machines that will be stationed at Mercer County’s polling places for the May 14 Primary ...
- India’s top court rules out changes to counting process over voting machine concernson April 26, 2024 at 5:31 am
India’s top court rules out changes to counting process over voting machine concerns - Supreme court rejects petitions seeking return to paper ballots ...
- Ferrying voting machines to mountains and tropical areas in Indian elections is a Herculean taskon April 24, 2024 at 8:23 pm
NEW DELHI -- From the Himalayan mountains to the tropical Andaman Islands, Indian officials are using helicopters, buses, trucks, boats, donkeys, and mules to carry electronic voting machines for ...
- Supreme Court turns down Lake, Finchem suit to ban electronic vote tallieson April 22, 2024 at 4:59 pm
PHOENIX — The U.S. Supreme Court on Monday turned down an appeal from Kari Lake and Mark Finchem, apparently ending their two-year bid to block the use of electronic voting tabulation ... court ...
- Supreme Court Refuses Kari Lake’s Lawsuit Over Electronic Voting Machines In Arizonaon April 22, 2024 at 10:10 am
Lake filed a lawsuit challenging the use of Dominion voting machines after losing the gubernatorial election in 2022.
via Bing News