Election Security Risks, Potential Voting Failures Loom

/ Source: TechNewsDaily

Most American voters can recall the drawn-out election recount of the 2000 presidential election, when the disputed outcome of Florida's electoral tally resulted in a legal and procedural battle that was not concluded until mid-December. 

Since then, according to a research report released last month by Caltech and MIT, the integrity and accuracy of voting systems in the United States have greatly improved.

However, experts think there could still be some problems Nov. 6. Even worse, some lost or misattributed votes could go completely undetected.

"A majority of states have implemented some kind of paper-audit record or paper ballot, which means there's some way, at least, to catch computer-based fraud in the majority of states," said J. Alex Halderman, an assistant professor of electrical engineering and computer science at the University of Michigan.

"Unfortunately," Halderman said, "a lot of other states still are behind the times and are still using technology that's been debunked for security purposes."

Lack of a paper trail

If there are no paper ballots, which are counted using optical-scanning systems, election officials can't go back and do an audit to ensure the votes were counted correctly, Halderman said.

For example, some counties in Maryland still use AccuVote voting machines that don't use paper ballots.

Several years ago, Halderman and a team of researchers showed they could completely hack AccuVote machines and change all the votes, and that it would take just one minute to install malicious code on the machine.

"Basically, [Maryland] doesn't have the resources to replace these systems with something better," Halderman said. "Maryland is one of the states of the greatest concern in terms of the quality of the technology."

Halderman said he's worried that problems with electronic voting might disrupt the process of counting ballots and declaring winners — even while not changing outcomes.

"This isn't just a question of whether we have a way to catch fraud, but also whether there might be systems that are unavailable or systems that require a lot of double-checking and auditing at the end before we can come to a conclusion," he said.

"It's likely we will see a Florida 2000-style meltdown in the presidential election in states that have very small margins of victory predicted, and that will control a larger number of Electoral College votes."

[ How Hackers Could Steal the Next Election ]

Ready or not

In the wake of Hurricane Sandy, New York and New Jersey are dealing with extenuating circumstances that could cause voting problems. But they aren't the only states that face challenges.

According to a recent report, "Counting Votes 2012: A State by State Look at Election Preparedness," not all states will be prepared come Election Day.

"It is highly likely that voting systems will fail in multiple places across the country," said the report, which was sponsored by the Verified Voting Foundation, the Rutgers University School of Law and the liberal good-government group Common Cause.

"In every national election in the past decade," said the report, " computerized voting systems have failed — machines haven't started, machines have failed in the middle of voting, memory cards couldn't be read, votes were mistallied or lost."

The report looked at how prepared each state is "to ensure that every eligible voter can vote, and that every vote is counted as cast."

Some of the findings include:

— Sixteen states  — Arkansas, Colorado, Delaware, Georgia, Indiana, Kansas, Kentucky, Louisiana, Maryland, Mississippi, New Jersey, Pennsylvania, South Carolina, Tennessee, Texas and Virginia  — use paperless machines, which don't create a physical record of votes, in some or all counties.

— Twenty-five states require no post-election audits to verify votes, which the report deemed "inadequate." They were Alabama, Arkansas, Delaware, Georgia, Idaho, Indiana, Iowa, Kansas, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Nebraska, New Hampshire, New Jersey, North Dakota, Oklahoma, Rhode Island, South Carolina, South Dakota, Tennessee, Virginia and Wyoming.

We may never know

"I think it is safe to say that there will be some voting systems that fail or have serious troubles during the election, since there are thousands of them and they are more complex than ever," said David Jefferson, a computer scientist at Lawrence Livermore National Laboratory in northern California and chairman of Verified Voting.

"It is, of course, much more problematic to predict which ones," Jefferson added, "although we have some general guesses."

Jefferson said there is a concern in the jurisdictions and states that use paperless voting.

"Those systems are vulnerable to various kinds of failures and security attacks," Jefferson said. "I'm not going to predict that any of these things are going to happen. But if they do happen, they're unauditable and there's just no way to recover from them.

"If votes are lost or, worse, if they're flipped, there will not be enough evidence because there's no paper trail for those ballots," he added. "We'll be stuck."