Electronic Voting Demonstration Project Research
The research described in this report was conducted to inform the project planning and execution of the Department of Defense's previously mandated electronic voting demonstration requirement. In the National Defense Authorization Act for Fiscal Year 2015, Congress eliminated this requirement and DoD is no longer exploring program implementation in this area. However, we believe the research and identification of outstanding questions are valuable and should be shared with the Uniformed and Overseas Citizens Absentee Voting Act (UOCAVA) stakeholder community. Much of the supporting research may hold value for any future deliberations on the merits of remote electronic voting.
FVAP Final Report on the Electronic Voting Demonstration Project
This report explains the context of the research associated with the electronic voting demonstration project, and discusses the scope and purpose of the research, its limitations, conclusions and recommendations.
This comprehensive research document references all of the reports included in the electronic voting demonstration project effort. They can be accessed below.
- Recommendations for the UOCAVA Pilot Program Testing Requirements (UPPTR) - November 2012
- This report summarizes UPPTR-related comments FVAP received during the execution of three studies: Voting System Testing Laboratory Functionality and Security Testing, Penetration Test of a Simulated Election Report and Operation VOTE.
- Federal Voting Assistance Program (FVAP) Operation VOTE - September 2011
- As part of a broad initiative to evaluate potential systems for remote voting electronic pilot projects, FVAP coordinated with the Office of Wounded Warrior Care and Transition Policy (WWCTP) and the EAC to address the voting related needs of Wounded Warriors. The Operation Vote project assessed the usability, accessibility, and privacy of electronic voting systems.
- Voting Over the DISN-CAC Analysis Feasibility Evaluation - October 2012
- This report documents a review and evaluation of the feasibility of applying the Defense Information System Networks (DISN), specifically the Non-Classified Internet Protocol Router Network (NIPRNet), as a conduit to support Uniformed and Overseas Citizens Absentee Voting (UOCAVA) voters in the voting process, coupled with the Defense Department's primary form of identification, the Common Access Card (CAC), as an available, standardized means of asserting reliable identification of potential voters.
- Investigation of the use of Software Assurance Tools on Internet Voting Software Applications - May 2014
- This report documents that existing software assurance (SA) tools provide a viable means of identifying potential security and coding best practice weaknesses of existing internet voting system vendors' software. The report documents a successful, and verified, methodology for conducting SA tool testing of voting system vendor software. The report also identifies challenges encountered and identifies resolutions that led to successful testing.
- The 2008 Okaloosa Distance Balloting Pilot Project - December 2012
- In 2008, elections officials in Okaloosa County, Florida, implemented the Okaloosa Distance Balloting Pilot (ODBP), a pilot program that sought to develop a solution model for other counties with large UOCAVA This report provides an evaluation of the pilot project.
- The Potential for Kiosk Voting in Nine States - March 2013
- This report uses the lessons learned from the review of the ODBP project as a baseline to develop an operational framework for UOCAVA voting based on the kiosk approach with a paper record.
- Secure Electronic Registration and Voting Experiment, Threat Risk Assessment - Phase 3 - March 2004
- This document discusses the topics that must be covered to understand the entire portfolio of Internet voting security risks affecting SERVE and its systems.
- Comparative Risk Analysis of the Current UOCAVA Voting System and an Electronic Alternative - February 2013
- This report presents a systematic risk analysis of the current UOCAVA by-mail voting system with an electronic alternative. It offers a baseline and a reference for future comparative analysis and an original analysis framework allowing quantitative comparison with other voting systems to be evaluated during the research and development phase of the demonstration project.
- Additional Appendices:
- Literature Review
- Voting Step Threat Trees
- Current UOCAVA Risk Assessment Questionnaire Template
- Voting Risk Assessment Questionnaire Template
- Vulnerability-Threat Database (VTDb)
- Cyber Security Expert 1: Current UOCAVA Risk Assessment Questionnaire
- Cyber Security Expert 1: eVoting Risk Assessment Questionnaire
- Cyber Security Expert 2: Current UOCAVA Risk Assessment Questionnaire
- Cyber Security Expert 2: eVoting Risk Assessment Questionnaire
- Cyber Security Expert 3: Current UOCAVA Risk Assessment Questionnaire
- Cyber Security Expert 3: eVoting Risk Assessment Questionnaire
- Cyber Security Expert 4: Current UOCAVA Risk Assessment Questionnaire
- Cyber Security Expert 4: eVoting Risk Assessment Questionnaire
- Election Expert 1: Current UOCAVA Risk Assessment Questionnaire
- Election Expert 1: eVoting Risk Assessment Questionnaire
- Election Expert 2: Current UOCAVA Risk Assessment Questionnaire
- Election Expert 2: eVoting Risk Assessment Questionnaire
- Election Expert 3: Current UOCAVA Risk Assessment Questionnaire
- Election Expert 3: eVoting Risk Assessment Questionnaire
- Risk Model Outputs
- Security Risk Estimates
FVAP previously released two reports related to the electronic voting demonstration project. Released April 28, 2015:
VSTL and PEN Test Reports
The FVAP Statement on Research Reports Related to UOCAVA System Testing explains the context of the research as it relates to FVAP's previously mandated electronic voting demonstration project. It discusses the scope and purpose of the research, its limitations, conclusions and recommendations.
This compiled document (15 MB) includes the "Voting System Testing Laboratory (VSTL) Functionality and Security and Testing" and "Penetration (PEN) Test of a Simulated Election" reports and all accompanying appendices. Due to its large file size, the individual reports and appendices are provided below.
Voting System Testing Laboratory (VSTL) Functionality and Security Testing Report
This report describes a 2010 research effort to help inform FVAP's previously mandated electronic voting demonstration project. The VSTL testing was conducted to gauge the sufficiency of the Election Assistance Commission's Uniformed and Overseas Citizens Absentee Voting Act Pilot Program Testing Requirements and evaluate the quality of testing across VSTLs.
VSTL Functionality and Security Testing Report with Appendices (12.4 MB)
- VSTL Functionality and Security Testing Report
- VSTL Report Appendix A: Glossary
- VSTL Report Appendix B: UOCAVA Pilot Program Testing Requirements
- VSTL Report Appendix C: VSTLS' Comments to the UPPTR
- VSTL Report Appendix D: Changes to the VSTL Standard Testing Methodology for UPPTR
- VSTL Report Appendix E: SLI Global Solutions Testing Report
- VSTL Report Appendix F: Wyle Laboratories Test Plan and Test Reports
Penetration (PEN) Test of a Simulated Election Report
This report describes a 2011 research effort to help inform FVAP's previously mandated electronic voting demonstration project. It describes penetration testing of three voting systems. It is important to note the tests were only intended to serve as a proof-of-concept for the establishment of a model design and methodology for future penetration testing.
PEN Test of a Simulated Election Report with Appendices (3.4 MB)
