internet_voting

Rick Forno, Assistant Director of the UMBC Center for Cybersecurity, was quoted in an article in the Louisville KY Courier-Journal about a compromised online poll the paper ran about Internet voting. The paper's March 20th poll was prompted by a Kentucky initiative to make voting easier for overseas personnel and asked "Should overseas U.S. military personnel be allowed to vote via the Internet?".

University of South Carolina computer science professor Duncan Buell and his students cast tens of thousands of votes for the "No, the possibility of fraud is just too great" response to highlight the potential risks of online voting.  Before the poll was shut down, more than 91% of the votes cast were negative and only 7% were positive ("Yes, it can be made just as secure as any balloting system").

In the Courier-Journal article, Forno pointed commented on relatively low security for most online polls.

But the difference between an online newspaper poll and state-run online election balloting is “night and day,” said Richard Forno, director of the Graduate Cybersecurity Program at the University of Maryland Baltimore County and assistant director of the university’s Center for Cybersecurity. “I’m not saying it’s impossible to hack some online voting for a state election, but it’s much more difficult to do it there” than with the newspaper’s poll, Forno said. A state election system “would have far more security features built in,” he said.  …   Forno said hacking generally is on the increase in the United States. “We’re seeing more and more cyber-related incidents” of all kinds, ranging from foreign theft of the intellectual property of U.S. companies to theft of personal information and webpage defacement, he said.

The security of voting systems is a specialty of UMBC Professor Alan Sherman, whose Center for Information Security and Assurance has worked on secure voting systems for more than ten years. In 2009, Sherman and his students helped the city of Takoma Park, Maryland use the Scantegrity voting system — the first time any end-to-end cryptographic system will be used in a binding governmental election.