Conformity Magazine - June 2008 - (Page 28)

systems both before and after an election to confirm that the digital signatures of the software remain identical to the certified version. The use of digital signatures has been proven to be highly reliable in detecting any changes in software, and their use in elections is very promising. California, Colorado, Ohio and other states have conducted far reaching examinations and retesting of their voting systems. “Red Team” simulated attacks on the voting system have been conducted by highly skilled computer security experts. In some cases, voting systems have been decertified because of problems found. More commonly irregularities in the process have been identified Immediately and loopholes closed. A problem that is getting increased scrutiny is the introduction of patches to either the voting system software or the operating system it runs on. Formerly, such patches were pretty much handled between the local jurisdiction and the vendor. Increasingly, patches are required to undergo their own certification process, and are implemented under a security system designed to ensure that only the intended from use patch is installed. These measures are intended to protect against the possibility that malicious software might be introduced along with a legitimate software update. Changing Issues An interesting dynamic to observe is how the focus of attention has shifted over time. Immediately after the 2000 election, the focus was on accuracy and, specifically, accuracy of punch card systems. The general impression, largely created by the popular media, was that punch card systems were inherently inaccurate and unreliable. The result was the removal of punch card systems from use in U.S. elections. Today, a vendor would be hard pressed to give away a punch card system. Sadly the general impression is not supported by scientific evidence. The accuracy of punch card system, when used properly, has consistently been shown to be about the same as other systems. When used improperly all types of voting systems have problems. The combination of the need to replace punch card system, and requirements in the Help America Vote Act to support independent voting by people with disabilities, created a general movement toward electronic voting machines. As 28 Conformity JUnE 2008 direct record electronic (DRE) voting machines became increasingly popular, the possibility that their software could be hacked became an increasing concern. Between 2000 and 2003 or 2004, the focus issue changed from election accuracy to election security. The movement toward the voter-verified paper ballot became very popular and won support in many states. However, the move to voter verified paper ballots has introduced problems of its own. First, the idea was so popular and introduced so quickly that it was not examined as to how the solution might introduce its own problems. Early experience with voter verified after the 2000 paper ballot systems have had up to 10% of the paper election, the focus was on records partially or totally corrupted. Recounts using the accuracy and, specifically, system have taken as much accuracy of punch card systems. as an hour per vote due to the cumbersome nature of the The general impression, largely paper roles and the inaccuracy created by the popular media, of human counts, which often require multiple counts to get was that punch card systems to a reliable number. Because were inherently inaccurate and of these unsettling experiences, new specifications are being unreliable. The result was the developed for future voter verified paper ballot systems. removal of punch card systems in U.S. elections. More fundamentally, there was a failure to analyze the move to voter verified paper ballot on a system level. Did this innovation really improve total election security and accuracy? Fundamentally, the voter verified paper ballot is a move away from dependence on computers and software back to relying on people counting paper. However, people counting paper have the highest levels of inaccuracy and a long history of vote fraud. In fact, in the U.S. there has never been a proven case of election fraud through hacking software but in every election there are proven cases of election fraud using paper. Most of the election fraud that currently happens occurs in various attempts to manipulate the early voting, mail-in paper ballots. Public perception is an absolutely essential factor in elections, and voter verified paper ballots appear to make the public feel good about elections. However, to stop there avoids the central scientific question, “What system gives us the most secure and accurate elections?” As some originally proposed the concept of voter verified paper ballots, the full concept was to have the voting system create auditable data and then have routine, random audits of that data. The idea was that voters would leave behind a paper record of their vote and routine, random audits could verify that the paper record matched the totals reported. Sadly, in only a few states that adopted the paper record coupled it with routine audits. That is a bit like filling a

Table of Contents Feed for the Digital Edition of Conformity - June 2008

Conformity - June 2008 Contents Editor's Note 700 MHz Auction Raises a Record $20 Billion FCC Modifies PCS and AWS Power Limit Rules for Broadband Wireless Commission Designates Spectrum Test Bed FCC Releases Report on Wireless Competition Commission Proposes $5 Million Fine for Slamming Using EDX for Non-Destructive Detection of Lead in Consumer Products ESD Open Forum Challenges in Testing - Improving Election Security and Accuracy Part 1 Challenges in Testing - Human Body Model: The Hidden Challenges High-Speed Signal Integrity Considerations for ESD Components Focus On...EMC Components Buyer's Guide FCC Levies $2.6 Million Fine for Junk Faxes FDA Updates Guidance on its Product Review Process EU Issues Updated Energy Star Regulations EU Repeals Directive on Veterinary Electro-Medical Equipment New Product Announcements Updated Standards List for the EU's PPE Directive CPSC Announces New Effort to Keep Out Hazardous Products CPSC Actions in the News IEC Standards Update UL Standards Update Product Reviews Telcordia Standards Update From Our "You Can't Make This Stuff Up" Department Looking Back: Items from Past Issues of Conformity Advertisers

Conformity - June 2008

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.