Computer scientists demonstrated that criminals could hack an electronic voting machine and steal votes using a malicious programming approach that had not been invented when the voting machine was designed.
The team of scientists from University of California, San Diego, the University of Michigan, and Princeton University employed “return-oriented programming” to force a Sequoia AVC Advantage electronic voting machine to turn against itself and steal votes.
“Voting machines must remain secure throughout their entire service lifetime, and this study demonstrates how a relatively new programming technique can be used to take control of a voting machine that was designed to resist takeover, but that did not anticipate this new kind of malicious programming,” said Hovav Shacham, a professor of computer science at UC San Diego’s Jacobs School of Engineering and an author on the new study presented on August 10, 2009 at the 2009 Electronic Voting Technology Workshop / Workshop on Trustworthy Elections (EVT/WOTE 2009), the premier academic forum for voting security research.
In 2007, Shacham first described return-oriented programming, which is a powerful systems security exploit that generates malicious behavior by combining short snippets of benign code already present in the system.
The new study demonstrates that return-oriented programming can be used to execute vote-stealing computations by taking control of a voting machine designed to prevent code injection. Shacham and UC San Diego computer science Ph.D. student Stephen Checkoway collaborated with researchers from Princeton University and the University of Michigan on this project.
“With this work, we hope to encourage further public dialog regarding what voting technologies can best ensure secure elections and what stop gap measures should be adopted if less than optimal systems are still in use,” said J. Alex Halderman, an electrical engineering and computer science professor at the University of Michigan.
The computer scientists had no access to the machine’s source code—or any other proprietary information—when designing the demonstration attack. By using just the information that would be available to anyone who bought or stole a voting machine, the researchers addressed a common criticism made against voting security researchers: that they enjoy unrealistic access to the systems they study.
“Based on our understanding of security and computer technology, it looks like paper-based elections are the way to go. Probably the best approach would involve fast optical scanners reading paper ballots. These kinds of paper-based systems are amenable to statistical audits, which is something the election security research community is shifting to,” said Shacham.
“You can actually run a modern and efficient election on paper that does not look like the Florida 2000 Presidential election,” said Shacham. “If you are using electronic voting machines, you need to have a separate paper record at the very least.”
The Latest on: Electronic voting machines
via Google News
The Latest on: Electronic voting machines
- One ballot found in voting machineon December 3, 2019 at 6:34 pm
A single ballot was found Monday at the bottom of an electronic voting machine with members of both special-purpose action committees, Midland ISD and the county attorney present, Midland County ...
- Harris County to seek vendor proposals for new voting machineson December 3, 2019 at 3:52 pm
The county has about 8,100 eSlate voting machines, known to many voters for their distinctive “spinning wheel ... For the Dec. 14 city runoffs, Trautman said election judges would simply drive the ...
- Tennessee Voting Machines Challenged at Sixth Circuiton December 3, 2019 at 9:27 am
CINCINNATI (CN) – An elections advocacy group urged a Sixth Circuit panel Tuesday to reinstate its case against the Tennessee Election Commission based on claims that one county’s electronic voting ...
- Letter of the Day: Understanding voting system vitalon December 2, 2019 at 8:13 am
and electronic poll books would be gradually introduced. The goal is a more efficient and accessible electoral system using a mix of old and new technology. The other, by Marjaleena Repo on Nov. 5, ...
- Top Court Refuses To Hear Tamil Actor's Plea Over Voting Machine Tamperingon December 2, 2019 at 12:28 am
The Supreme Court today refused to hear a petition filed by Tamil actor Mansoor Ali Khan which claimed that the Electronic Voting Machines (EVMs) can be tampered with. A three-judge bench of the court ...
- Suit challenges Pennsylvania over voting machines used in Northampton County, Philadelphiaon November 27, 2019 at 12:19 pm
Wolf's push to require counties to buy new machines began after federal authorities said Russian hackers had targeted Pennsylvania and at least 20 other states during 2016's presidential election.
- Electronic Glitch Makes For Slow Start to Namibian Electionson November 27, 2019 at 4:27 am
A WhatsApp message group created for journalists by the Electoral Commission of Namibia, reported malfunctioning electronic voting machines at various stations, including one in Windhoek. Geingob said ...
- Philadelphia's voting machines challenged in federal courton November 26, 2019 at 4:36 pm
Wolf’s push to require counties to buy new machines began after federal authorities said Russian hackers had targeted Pennsylvania and at least 20 other states during 2016’s presidential election.
- How DeKalb residents can try out Georgia’s new voting machineson November 26, 2019 at 10:10 am
A town hall hosted by DeKalb Commissioner Lorraine Cochran-Johnson will include interactive demonstrations of the new machines and information on voter registration, the commissioner’s office said ...
- Namibians to use electronic voting machineson November 25, 2019 at 4:25 am
Namibians will use electronic voting machines (EVMs) in Wednesday’s presidential and parliamentary elections, court ruled on Monday. The opposition which fears that President Hage Geingob could use ...
via Bing News