India's electronic voting machines are vulnerable to attack (w/ Video)

Apr 29, 2010

(PhysOrg.com) -- Electronic voting machines in India, the world's largest democracy, are vulnerable to fraud, according to a collaborative study involving a University of Michigan computer scientist.

Even brief access to the paperless machines could allow criminals to alter election results, the seven-month investigation reveals.

In a demonstration video available at IndiaEVM.org, the researchers show two attacks against an actual Indian electronic voting machine. One attack involves replacing a small part with a look-alike component that can be instructed to steal a percentage of the votes from a candidate. Another attack uses a pocket-sized device to change the votes stored in the machine between the election and the public counting session, which in India can be weeks later.

This video is not supported by your browser at this time.

"Almost every component of this system could be attacked to manipulate election results," said J. Alex Halderman, a U-M assistant professor of computer science and engineering who, with his students, helped to develop the attacks to test the security of the system. "This proves, once again, that the paperless class of voting systems has intrinsic security problems. It is hard to envision systems like this being used responsibly in elections."

These research findings are at odds with claims made by the Election Commission of India, the country's highest election authority, the researchers say. The commission, which maintains that weaknesses found in other electronic voting systems around the world do not apply to India's, has called the Indian machines "fully tamper-proof."

Almost the entire population of India uses electronic voting machines to cast ballots. The approximately 1.4 million machines in use there are of the "Direct Recording Electronic" (DRE) variety. DREs record votes to internal memory and provide no paper records for later inspection or recount. With DREs, absolute trust is placed in the hardware and software of the voting machines, the researchers say. Paperless electronic voting systems have been criticized globally and many countries and U.S. states are abandoning such systems.

"Such machines have already been abandoned in Ireland, The Netherlands, Germany, Florida and many other places. India should follow suit," said Rop Gonggrijp, a security researcher from the Netherlands who took part in the study.

"Never mind what election officials say, this research once again shows that the longstanding scientific consensus holds true: DRE voting machines are fundamentally vulnerable. In order to have any transparency in elections, you need to have votes on paper. Computers can be programmed to count votes honestly, but since nobody can watch them, they might just as easily be programmed to count dishonestly."

The researchers also noted that the vote-counting software in the electronic voting machines is programmed into so-called "mask programmed microcontrollers," which do not allow the software to be read out and verified. Because these chips are made in the United States and Japan, nobody in India knows for sure what software is in these machines or whether it counts votes accurately, the researchers say.

"Everywhere I looked there were more security problems," said Hari Prasad, a computer engineer with NetIndia, Ltd who organized the study. "India deserves a transparent process, which these machines simply cannot deliver."

This study was performed by researchers at NetIndia, Ltd., in Hyderabad, the University of Michigan in the United States, and at a non-profit in the Netherlands that specializes in electronic voting related issues.

Explore further: Designing exascale computers

Related Stories

Electronic voting system tested by Newcastle University

May 14, 2008

An electronic vote capture and counting system, designed to overcome the problems which have dogged computerised voting systems throughout the world, notably the touch screen voting machines in the US and pilot schemes run ...

Protect your vote -- avoid election machine errors

Nov 03, 2008

Of all the conceivable problems that could lead to a miscount Election Day, there's one possibility that voters can do something about – avoid making election machine-related errors, says a University of ...

Voters confused by e-voting technologies

Jan 28, 2008

A study led by the University of Maryland suggested that electronic U.S. voting technologies are efficient but too many voters ask for help too often.

Human factors researchers test voting systems for seniors

Dec 27, 2007

Human factors researchers at Florida State University have identified ways to improve electronic voting accuracy among older voters while also shortening waiting time at the polls. The results of their study were published ...

Recommended for you

Designing exascale computers

13 hours ago

"Imagine a heart surgeon operating to repair a blocked coronary artery. Someday soon, the surgeon might run a detailed computer simulation of blood flowing through the patient's arteries, showing how millions ...

User comments : 4

Adjust slider to filter visible comments by rank

Display comments: newest first

THoKling
5 / 5 (1) Apr 29, 2010
Electronic voting machines have proven to be very effective in countries with a fair rate of corruption in their government. Fortunately, India has no such issues, and therefore these machines have no place in their country.

(Removing firmly-planted tongue from cheek.)
VOR
not rated yet Apr 30, 2010
maybe some kind of write-once storage could be used that could record the vote at time of voting. That would make for less points of possible tampering.
Valentiinro
1 / 5 (1) Apr 30, 2010
Furthermore, it isn't as if one couldn't replace a stack of paper votes with a different stack. Yeah, if you break a part off the machine and replace it, it isn't going to work as planned.

How about you guard the machine?

Even in the simplest system of dropping something in a specific box to a specific candidate, one could put a little tube that goes from one box to the other or some such. There is no such thing as tamper proof, just make sure they don't tamper.
Codeofuniverse
not rated yet Apr 30, 2010
Electronic machines made mockery of Indian democracy.We found that in last Parliamentary and Assembly elections, in some constituencies , winner candidate got absolute 100% votes which is impossible , does it mean that the rest of candidate who were contesting elections didn't vote even for themselves?