Security Management
Published on Security Management (http://www.securitymanagement.com)
Despite Widespread Security Problems, Ohio Will Use Electronic Voting Systems This Election
By Matthew Harwood
Created 10/08/2008 - 11:57



    
Wrap-Up?: 
No
Weight: 
0
Lead Headline?: 
No
Date: 
10/08/2008
By Line: 
By Matthew Harwood
Teaser: 

Electronic voting machines that have "critical security failures" will once again count votes in Ohio during this year's presidential election. Ohio's secretary of state, however, said a hand counting pilot program may be instituted next year.

With voting irregularities [1] in 2004, a report last year critical of the state's e-voting machines [2], and Ohio's reputation as kingmaker [3]in this year's presidential election, you better believe all eyes will turn to the Buckeye State on November 4.

Today, ComputerWorld.com published blogger Brad Friedman [4]'s interview [5]with Ohio's secretary of state, Jennifer Brunner—the state's chief election official—to see how the state is preparing for the biggest presidential turnout in its history after a review last year discovered the Ohio's electronic voting systems, such as touch-screen voting machines, had "critical security failures."

Known as Project EVEREST [6] (pdf), the review's report discredited all three vendor electronic voting systems—Premier Elections Solutions Inc. [7], a subsidiary of Diebold Inc.; ES&S [8]; and Hart InterCivic [9]—used by Ohio. "Red team" penetration tests performed by MicroSolved [10] found that:

“[a]ll three vendor systems reviewed have serious gaps in compliance with even the most basic set of information security guidelines used by systems in industries such as finance, insurance, medical care, manufacturing, logistics and other global commerce. Given the extremely valuable data that these systems process and the fact that our very democracy and nation depend on the security of that data, much work remains to be done by all three vendors.”

This led the report to conclude:

Unfortunately, the findings in this study indicate that the computer-based voting systems in use in Ohio do not meet computer industry security standards and are susceptible to breaches of security that may jeopardize the integrity of the voting process. Such safeguards were neither required by federal regulatory authorities, nor voluntarily applied to their systems by voting machine companies, as these products were certified for use in federal and state elections.

Then in March, Ohio officials discovered that some Premier voting systems simply dropped votes. (In August, Premier admitted [11]as much.)

The problems, however, were not contained to electronic voting machines, according to Friedman. "Because the problem is in the tabulator system, it affects votes cast on both Diebold's direct recording electronic (DRE) systems, which are usually touch screen, and paper ballot optical-scan systems." The same central tabulators, wrote Friedman, will be in use in 30 other states come election day. Premier has issued customer alerts with safeguards to implement.

Despite these problems, the same systems criticized by EVEREST will be in use once again in Ohio this November, although Brunner has issued directives to inform Ohio's voters that they can choose to vote on a paper ballot if they mistrust touch-screen voting.

Friedman asked Brunner if it would be possible to set up a pilot test to hand count paper ballots, like 20 percent of precincts in New Hampshire do.

"[Hand counting] may be worth it to try as a pilot [program]," she said. "I'm not so sure I'd want to experiment during the presidential elections."

She did, however, say Ohio should do a hand-counting pilot test next year.

Related Resources: 

Comments


Security Management is the award-winning publication of ASIS International, the preeminent international
organization for security professionals, with more than 38,000 members worldwide.

ASIS International, Inc. Worldwide Headquarters, 1625 Prince Street, Alexandria, Virginia 22314-2818 U.S.A.
703.519.6200 | fax 703.519.6299 | www.asisonline.org

ASIS

© 2013 Security Management
This site is protected by copyright and trade mark laws under U.S. and International law.
No part of this work may be reproduced without the written permission of Security Management.

Powered by: Phase2 Technology

Source URL: http://www.securitymanagement.com/news/despite-widespread-security-problems-ohio-will-use-electronic-voting-systems-election-004741

Links:
[1] http://www.washingtonpost.com/wp-dyn/articles/A41275-2004Dec6.html
[2] http://www.sos.state.oh.us/SOS/PressReleases/2007%20Press%20Releases/2007-12-14.aspx
[3] http://www.washingtonpost.com/wp-dyn/content/story/2008/10/06/ST2008100602387.html
[4] http://www.bradblog.com/
[5] http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=Security&articleId=9116465&taxonomyId=17&pageNumber=1
[6] http://www.sos.state.oh.us/sos/upload/everest/00-SecretarysEVERESTExecutiveReport.pdf
[7] http://www.premierelections.com/
[8] http://www.essvote.com/HTML/global_gateway/home.html
[9] http://www.hartintercivic.com/
[10] http://microsolved.com/
[11] http://voices.washingtonpost.com/the-trail/2008/08/21/ohio_voting_machines_contained.html