Climbing Everest: an Insider's Look at One State's Voting Systems
Sandy Mouse Clark explores climbing everest: an insider's look at one state's voting systems at DEF CON 16, examining emergency-systems and practical defenses.
Summary
Architecture and Background
Sandy "Mouse" Clark: Climbing Everest: An Insider's Look at one state's Voting Systems Hanging Chads, Hopping votes, Flipped votes, Tripled votes, Missing memory cards, Machine malfunctions, Software glitches, Undervotes, Overvotes. Reports of voting machine failures flooded the news after the last elections and left most voters wondering "Does my vote really count?" "Can these electronic voting machines be trusted?" "How secure are my state's voting systems?" In December 2007, we published an in depth, source code and hardware analysis of all the voting systems used by the state of Ohio, funded by the Ohio Secretary of State.
Vulnerability Analysis
Come find out what we learned, and draw your own conclusions. Sandy Clark, "Mouse" has been taking things apart since the age of two, and still hasn't learned to put them back together.
Exploitation and Demonstrations
Luckily, in the University of Pennsylvania's Distributed Systems Lab, this behavior is actively encouraged. A founding member of Toool-USA, she also enjoys puzzles, toys, Mao (the card game, not the person) and infrastructure hacking.
Remediation and Defensive Strategies
Her research explores human scale security and the unexpected ways that systems interact. For copies of the slides and additional materials please see the DEF CON 16 Archive here:
Related talks
Main Stage·1 hr 54 min
Workshop
Workshop details workshop: Davix Workshop Need help understanding your gigabytes of application logs or network captures.
Main Stage·41 min
Weasel
Weasel details weasel: Compliance: The Enterprise Vulnerability Roadmap Compliance is no longer new.
Main Stage·48 min
Valsmith · Colin Ames
Valsmith and Colin Ames explores metapost-exploitation at DEF CON 16, examining emergency-systems and practical defenses.