Information about http://vote.nist.gov/AdoptedResolutions12040506.pdf

Resolutions adopted by the Technical Guidelines Development…

Tags: additional security, development committee, election officials, election procedures, iteration, physical path, physical security, plenary session, resolutions, rivest, security concerns, security research, sole exception, system implementers, tgdc, title software, voting systems, vulnerability testing, vvsg, wireless security,
Pages: 2
Language: english
Created: Thu Dec 7 08:52:27 2006
Display cached document
Page 1
image
Page 2
image
     Resolutions adopted by the Technical Guidelines Development Committee at the
                          December 4, 5 2006 Plenary Session

Resolution # 03-06: Offered by Dr. Rivest
Title: The Innovation Class in VVSG 2007

To spur development of new and innovative secure voting systems, the Technical Guidelines
Development Committee (TGDC) directs the Security and Transparency Subcommittee (STS) to
include in the next iteration VVSG a new class of voting systems, referred to here as the
"Innovation Class." The TGDC directs STS to investigate high-level, guiding requirements for
systems in this class for the purpose of providing system implementers with a path
towards achieving certification to the next iteration of the VVSG. STS should also investigate
approaches for reviewing, testing, and certifying systems in this class. These approaches could
include convening a review board to review submissions and performing expanded open-ended
vulnerability testing on systems submitted for certification.


Resolution #04-06 Offered by Dr. Rivest        Amendment to Resolution #35-05 ,
Title: Wireless Security

The TGDC has considered additional security research since Resolution #35-05 was passed
and has concluded that the presence of or capability for any wireless in equipment whose
purpose is for official vote casting, counting, and reporting should be prohibited in the next
iteration of the VVSG. The sole exception is for infrared wireless, which should only be allowed
if the physical path is shielded in addition to the security measures already in VVSG 2005.

Resolution # 06-06: Offered by Dr. Rivest
Title: Software Independence of Voting Systems

Election officials and vendors have appropriately responded to the growing complexity of voting
systems by adding more stringent access controls, encryption, testing, and physical security to
election procedures and systems. The TGDC has considered current threats to voting systems
and, at this time, finds that security concerns do not warrant replacing deployed
voting systems where EAC Best Practices are used.

To provide auditability and proactively address the increasing difficulty of protecting against all
prospective threats, the TGDC directs STS to write requirements for the next version of the
VVSG requiring the next generation of voting systems to be software independent. The TGDC
directs STS and HFP to draft usability and accessibility requirements to ensure that all
voters can verify the independent voting record.

The TGDC further directs STS and Core Requirements and Testing Subcommittees (CRT) to
draft requirements to ensure that systems that produce independently verifiable voting records
are reliable and provide adequate support for audits.
Resolution 08-06 Title: Recommendation to ICDR
Offered by Whitney Quesenbery

The Interagency Committee on Disability Research (ICDR) sets the agenda for federal
disability research, and actively seeks recommendations for future research topics.
The TGDC recommends that the ICDR consider the topic of voting system accessibility for one
of ICDR's annual conferences.



Resolution 09-06 Title: Principal Criteria
Offered by Stephen Berger

The TGDC will include in the guidelines as a statement of the overall goal to produce systems
with the following attributes:

· Secure
· Accurate
· Reliable
· Usable
· Accessible
· Fit for its intended use

This may allow for the certifying authority to consider whether a candidate's voting system not
only is in conformance with the requirements, but also whether it meets the higher level goals.


Resolution # 10-06: Title: Reliability Metrics
 Offered by Mr. Berger
The TGDC concurs with moving away from MTBF (Mean Time Between Failure)
as a reliability metric for voting systems.