Security Experts Warn Against Internet Voting: 'Insecure and Dangerous'

The perennial debate over the security of internet voting has resurfaced, with a coalition of leading security experts issuing a stark warning against its implementation in elections. Citing fundamental technological limitations, the group asserts that no existing or foreseeable technology can guarantee the integrity and security of online voting systems.

The renewed concerns stem from persistent efforts by vendors and advocacy groups to promote internet voting as a viable solution, despite well-documented vulnerabilities. As security professionals, we must stress the severe risks associated with this approach.

The Fundamental Flaws of Remote Electronic Voting

The core issue, as articulated in a public letter signed by numerous experts, including myself, lies in the inherent difficulty of securing end-to-end voting processes over the internet. The attack surface is simply too vast. From voter's personal devices, often riddled with malware and lacking robust security measures, to the network infrastructure and the voting servers themselves, every step presents an opportunity for malicious actors to compromise the system. A successful attack could alter votes, disenfranchise voters, or reveal how individuals voted, destroying the secret ballot.

We must also address the claim that new systems are somehow different. Claims of increased security often mask a lack of understanding of the threat model. The reality is that many of the proposed solutions, such as blockchain-based voting or advanced encryption techniques, introduce new complexities and potential vulnerabilities, without fundamentally addressing the core security challenges.

Specific Threats and Vulnerabilities

While specific CVEs (Common Vulnerabilities and Exposures) are not always publicly available for proprietary internet voting systems, the potential vulnerabilities are well-understood. These include:

• Man-in-the-Middle Attacks: Interception of voting data as it travels across the internet.
• Denial-of-Service Attacks: Overwhelming the voting servers to prevent legitimate voters from casting their ballots.
• Malware Infections: Compromising voter devices to alter votes before they are submitted.
• Insider Threats: Malicious actors within the voting system infrastructure.

The CVSS (Common Vulnerability Scoring System) scores for these types of attacks are often critical, reflecting the potential for widespread impact and severe consequences. The TTPs (Tactics, Techniques, and Procedures) employed by sophisticated threat actors are constantly evolving, making it increasingly difficult to defend against these threats.

The Role of Vendors and Advocates

Groups like the Mobile Voting Foundation, led by Bradley Tusk, continue to promote internet voting, often downplaying the security risks and exaggerating the potential benefits. Such advocacy is not only misleading but also dangerous, as it could lead to the adoption of insecure voting systems, undermining public trust in the electoral process.

It is imperative that election administrators and policymakers heed the warnings of security experts and resist the allure of internet voting. The potential consequences of a successful attack are far too great to justify the risks. We must prioritize the security and integrity of our elections above all else.

The pursuit of convenience should not come at the expense of security. The risks associated with internet voting are simply too high, and until a truly secure solution is developed, it should remain off the table. The integrity of our democratic processes depends on it. Future advancements in cryptography and distributed systems may, one day, offer a path toward secure online voting, but that day is not today. The current technological landscape is simply not mature enough to support such a system without introducing unacceptable risks.