Protecting Against Electronic Voter HackingFor local and state governments trying to protect themselves against electronic voter hacking, governments should consider the best practices they use every day for regular information technology systems and apply them to the technology deployed for electronic voting:
- Accountability – Hold the manufacturer to a Service Level Agreement for remediating discovered vulnerabilities and system flaws.
- Vulnerability Assessments – conduct regular independent vulnerability assessments against the operating systems, applications, and web applications to prove they are secure.
- Report – Document the findings from assessments and penetration tests to track results and raise awareness to proper authorities.
- Remediation – Patch any security vulnerabilities that are the responsibility of the government and notify the manufacturer of their responsibilities.
Morey J. Haber, Chief Security Officer, BeyondTrust
Morey J. Haber is the Chief Security Officer at BeyondTrust. He has more than 25 years of IT industry experience and has authored three books: Privileged Attack Vectors, Asset Attack Vectors, and Identity Attack Vectors. He is a founding member of the industry group Transparency in Cyber, and in 2020 was elected to the Identity Defined Security Alliance (IDSA) Executive Advisory Board. Morey currently oversees BeyondTrust security and governance for corporate and cloud based solutions and regularly consults for global periodicals and media. He originally joined BeyondTrust in 2012 as a part of the eEye Digital Security acquisition where he served as a Product Owner and Solutions Engineer since 2004. Prior to eEye, he was Beta Development Manager for Computer Associates, Inc. He began his career as Reliability and Maintainability Engineer for a government contractor building flight and training simulators. He earned a Bachelor of Science degree in Electrical Engineering from the State University of New York at Stony Brook.