news

News

SAIT Report Affirmed.
FSView Op BRAVO Article.
SAIT joins Operation Bravo.
WFSU Op BRAVO Interview.
SAIT Diebold Review.
SAIT CD13 Report Released
Dr. Yasinsac at NAE’s 2007 Evoting Symposium.

Best viewed with a DHTML & CSS2 comp- atible browser in 1024x768 or higher.

SAIT Software Review Team Participates in Florida Department of State Sponsored Voting System Software Review

2007.07.31

SAIT Laboratory was tapped once again to conduct source code review for electronic voting systems. The Florida Department of State web site publishes the SAIT Laboratory Diebold Voting System Software Review and a letter from the Secretary of State to Diebold.

While the effort’s focus was software analysis, the team had broad access to the subject voting equipment and generated exploits for the major identified vulnerabilities. These exploits were then demonstrated and described in detail to Florida Division of Elections personnel.

An important result of this project is that it reflects a clear connection between theory and practice. Exploit of several of the complex theoretical vulnerabilities show how flaws detected with analytical methods translate directly into concrete security risks and threats.

This SAIT Laboratory effort once again leveraged extraordinary cooperation between state elections officials, academic information security experts, and elections systems software developers to accomplish the project’s goal. We are confident that this is a significant step towards ensuring that only the most secure software possible is allowed into electronic voting systems and components.

The bulk of the team’s technical work took place in SAIT Laboratory and culminated in the thirty five page public report that detailed the project goals, assumptions, process, findings, and conclusions.

The team also identified non-pertinent software flaws and security vulnerabilities during the analysis. Specific technical descriptions along with accompanying recommendations regarding these faults were reported to the State and the vendor through private appendices to the report. These constitute an independent contribution of the team to the broader goal of improving voting systems’ reliability and security.

Software Review Team Members

Alec Yasinsac	SAIT Laboratory	Lead Principle Investigator
Matt Bishop	University of California, Davis	Senior Scientist
Tadayoshi Kohno	University of Washington	Senior Scientist
Ryan Gardner	Johns Hopkins University	Investigator
David Gainey	SAIT Laboratory	Investigator
Michael Gerke	SAIT Laboratory	Investigator
John Kerski	SAIT Laboratory	Investigator
Zachary Hartley	SAIT Laboratory	Investigator
Evan Hollander	SAIT Laboratory	Investigator
Ryan Walega	SAIT Laboratory	Investigator

SAIT acknowledges and thanks David Jefferson, Avi Rubin, and the ACCURATE Center for their contributions to this project.