Security Challenges Posed by State-Level Election Management Systems
Examines cybersecurity challenges, SQL injection risks, and systemic vulnerabilities across state-level election management systems.
Summary
John Odom examines the architectural vulnerabilities and cybersecurity risks inherent in state-level Election Management Systems (EMS) and voter registration databases. He highlights how the centralization of voter records into online portals creates high-value targets for both state-sponsored actors and cybercriminals.
Odom reviews known security vulnerabilities affecting state election websites and vendor infrastructure at 04:02 and 05:55. He analyzes attack vectors including SQL injection, cross-site scripting, and unauthorized database access at 08:02 and 10:11, illustrating how flawed validation logic could allow attackers to manipulate voter records, alter registration statuses, or disrupt poll operations on election day. He concludes with recommendations for independent security audits and mandatory defense-in-depth measures.
(AI summary — Gemini Flash)
Related talks
Voting Village·1 hr 14 min
Amélie Koran
Convenes a panel to examine emerging cyber threats, disinformation campaigns, and coordinated vulnerability disclosure ahead of the 2020 election.
Voting Village·13 min
Mårten Mickos
Discusses how coordinated vulnerability disclosure and bug bounty programs enable researchers to report security flaws in election systems.
Voting Village·16 min
Secure the Vote
Demonstrates the lack of security in email and fax ballot return systems used by overseas voters and advocates for robust federal standards.