Evaluating the Security of Electronic Voting Systems - We also prepared a movie that shows how the virus-like attack would be carried out, and exemplifies the different scenarios that our malicious firmware would exploit.The video shows how one can use a simple USB key to infect the laptop used to prepare the cards that initialize the various voting devices. As a result, the cards are loaded with a malicious software component.When a card is inserted in a voting terminal, the malicious software exploits a vulnerability in the terminal loading procedure and installs a modified firmware, effectively "brainwashing" the terminal.Later, when the terminal is used by the voters to cast their votes, the firmware uses a number of different techniques to modify the contents of the ballots being cast.The movie also shows that the physical security measures being used to limit access to essential parts of the voting systems are ineffective.The movie cannot be downloaded from this page anymore, because after we were featured on Slashdot the Department web server maxed out.However somebody uploaded the video on YouTube.
From
cw
