Washington: Students in an advanced computer security course at Rice University, Houston, are learning just how easy it is to break into software used in today's voting machines.

Dan Wallach, a Rice University associate professor and director of its Computer Security Lab, tested his students through a real-life experiment. They were told to do their very best to rig an electronic voting machine (EVM) in the classroom.

Wallach split his class into teams. In phase one, the teams pretended to be unscrupulous programmers at a voting machine company. Their task: Make subtle changes to the machines' software - changes that will alter the election's outcome but that cannot be detected by election officials.

In the second phase of the experiment, the teams are told to play the part of the election's software regulators. Their task is to certify the code submitted by another team in the first phase of the class.

"What we've found is that it's very easy to insert subtle changes to the voting machine," Wallach said. "If someone has access and wants to do damage, it's very straightforward to do it."

The good news, according to Wallach, is "when looking for these changes, our students will often, but not always, find the hacks".

"While this is a great classroom exercise, it does show how vulnerable certain electronic voting systems are," Wallach said. "If someone had access to machines and had the knowledge these students do, they surely could rig votes."

Even though students were often able to find the other team's hacked software bugs, Wallach said that in real life it would probably be too late, according to a Rice University release.

"In the real world, voting machines' software is much larger and more complex than the Hack-a-Vote machine we use in class," he said. "We have little reason to believe that the certification and testing process used on genuine voting machines would be able to catch the kind of malice that our students do in class. If this happened in the real world, real votes could be compromised and nobody would know."

In 2006, electronic voting machines accounted for 41 percent of the tallied US votes. Fifty percent were cast on paper, and nine percent "other", including New York's lever machines.

 

Source : ians