Workshop Program

All sessions will be held in Harbor A unless otherwise noted.

The accepted refereed articles listed below appear in Volume 2, Numbers 1–3, of The USENIX Journal of Election Technology and Systems (JETS).

 

Monday, August 18, 2014

8:30 a.m.–9:00 a.m. Monday

Continental Breakfast

Harbor Foyer

9:00 a.m.–9:15 a.m. Monday

Welcome

Walter Mebane, University of Michigan, and Dan S. Wallach, Rice University

9:15 a.m.–10:15 a.m. Monday
10:15 a.m.–10:45 a.m. Monday

Break with Refreshments

Harbor Foyer

10:45 a.m.–12:15 p.m. Monday

Fraud and Error in Practice

Do New Voting Technologies Prevent Fraud? Evidence from Russia

4:45 pm

Max Bader, Leiden University

Widespread concerns exist that new voting technologies invite electoral fraud. In states with a known record of electoral fraud, however, the use of new voting technologies may help reduce the incidence of fraud by automating parts of the voting and counting process. This study shows that the use of optical scan voting systems had a significant effect in terms of fraud reduction during the 2011 legislative election in Russia. This finding has implications for organizations and governments that seek to promote democratic elections in undemocratic states. 

 

Available Media

A Systematic Approach to Analyzing Voting Terminal Event Logs

4:45 pm

Laurent D. Michel, Alexander A. Shvartsman, and Nikolaj Volgushev, University of Connecticut

This paper presents a systematic approach to automating the analysis of event logs recorded by the electronic voting tabulators in the course of an election. An attribute context-free grammar is used to specify the language of the event logs, and to distinguish compliant event logs (those that adhere to the defined proper conduct of an election) andnon-compliant logs (those that deviate from the expected sequence of events). The attributes provide additional means for semantic analysis of the event logs by enforcing constraints on the timing of events and repetitions of events. The system is implemented with the help of commodity tools for lexical analysis and parsing of the logs. The system was rigorously tested against several thousand event logs collected in real elections in the State of Connecticut. The approach based on an attribute grammar proved to be superior to a previous approach that used state machine specifications. The new system is substantially easier to refine and maintain due to the very intuitive top-down specification. An unexpected benefit is the discovery of revealing and previously unknown deficiencies and defects in the event log recording systems of a widely used optical scan tabulator.

Available Media
12:30 p.m.–2:00 p.m. Monday

Luncheon for Workshop Attendees

Harbor Foyer

2:00 p.m.–3:30 p.m. Monday

Usability and Accessibility

Do Voters and Poll Workers Differ in their Attitudes Toward E-voting? Evidence from the First E-election in Salta, Argentina

5:00 pm

Julia Pomares, Center for the Implementation of Public Policies Promoting Equity and Growth; Ines Levin, University of Georgia; R. Michael Alvarez, California Institute of Technology

We provide an analysis of voter and poll worker perceptions of the advantages and disadvantages of a new e-voting system vis–à–vis traditional ballot-and-envelope voting in the 2011 election in Salta, Argentina. The results of this comparison provide new insights into how poll workers perceive the implementation of new voting technologies and show that both points of view need to be taken into account when assessing new election technology. We found that speed is perceived to be the most important advantage of e-voting; and more so for poll workers than for voters. This is not surprising since speed is an aspect of a voting technology that directly affects the workflow of poll workers. We also found that poll workers expressed more intensely negative attitudes towards e-voting than voters, especially in relation to difficulty of use and lack of training. Finally, we found that both voters and poll workers placed more importance on usability than confidence issues. This is an unexpected finding since election authorities have identified confidence in the integrity of the election process as the main trigger of the adoption of the new voting technology. Analyses like the one conducted in this paper should be an integral component of the evaluation of the implementation of new voting technologies and introduction of important procedural changes. 

 

Available Media

Making Voting Accessible: Designing Digital Ballot Marking for People with Low Literacy and Mild Cognitive Disabilities

5:00 pm

Kathryn Summers, University of Baltimore; Dana Chisnell, Center for Civic Design; Drew Davies, Oxide Design Co.; Noel Alton and Megan Mckeever, University of Baltimore

This research began with a question about addressing a broader range of accessibility issues in voting than the standards in the Voluntary Voting System Guidelines (VVSG) require. The VVSG standards cover accessibility for low vision, blindness, and cognitive disabilities. But what if anyone could mark their ballot anywhere, any time, on any device? While the likelihood of voters voting on their own devices may be remote in the current elections environment, it is likely that election jurisdictions will begin to use consumer off the shelf devices as the voter-facing part of voting systems soon. Thus, we narrowed the scope of our research to prototyping an accessible, responsive, Web standards-compliant front end for ballot marking that would be accessible to voters with low literacy (a previously ignored voter audience) or who had mild cognitive disabilities. The final ballot interface is based on principles of “plain language” and “plain interaction.” The ballot interface is available under a Creative Commons license at anywhereballot.com. This paper reports on the rapid iterative testing and evaluation (RITE; Medlock et al., 2002) we conducted and the lessons we learned about designing a digital ballot interface for people with low literacy or mild cognitive disabilities. 

Available Media
3:30 p.m.–4:00 p.m. Monday

Break with Refreshments

Harbor Foyer

4:00 p.m.–4:15 p.m. Monday

Group Discussion

Future plans for EVT/WOTE and JETS

4:15 p.m.–5:00 p.m. Monday

 

Tuesday, August 19, 2014

8:30 a.m.–9:00 a.m. Tuesday

Continental Breakfast

Harbor Foyer

9:00 a.m.–10:30 a.m. Tuesday

New Crypto Schemes

Every Vote Counts: Ensuring Integrity in Large-Scale Electronic Voting

5:15 pm

Feng Hao, Newcastle University; Matthew N. Kreeger, Thales E-Security; Brian Randell, Dylan Clarke, Siamak F. Shahandashti, and Peter Hyun-Jeen Lee, Newcastle University

This paper presents a new End-to-End (E2E) verifiable e-voting protocol for large-scale elections, called Direct Recording Electronic with Integrity (DRE-i). In contrast to all other E2E verifiable voting schemes, ours does not involve any Tallying Authorities (TAs). The design of DRE-i is based on the hypothesis that existing E2E voting protocols’ universal dependence on TAs is a key obstacle to their practical deployment. In DRE-i, the need for TAs is removed by applying novel encryption techniques such that after the election multiplying the ciphertexts together will cancel out random factors and permit anyone to verify the tally. We describe how to apply the DRE-i protocol to enforce the tallying integrity of a DRE-based election held at a set of supervised polling stations. Each DRE machine directly records votes just as the existing practice in the real-world DRE deployment. But unlike the ordinary DRE machines, in DRE-i the machine must publish additional audit data to allow public verification of the tally. If the machine attempts to cheat by altering either votes or audit data, then the public verification of the tallying integrity will fail. To improve system reliability, we further present a fail-safe mechanism to allow graceful recovery from the effect of missing or corrupted ballots in a publicly verifiable and privacy-preserving manner. Finally, we compare DRE-i with previous related voting schemes and show several improvements in security, efficiency and usability. This highlights the promising potential of a new category of voting systems that are E2E verifiable and TA-free. We call this new category “self-enforcing electronic voting”.

Available Media

Invited Talk

9:00 am-10:30 am

Brian Hancock, Director, Voting System Testing and Certification, U.S. Election Assistance Commission (EAC)

Brian Hancock has served on the staff of the U.S. Election Assistance Commission (EAC) since its establishment under the Help America Vote Act (HAVA) in 2003. As Director of the Testing and Certification Division, Mr. Hancock’s programmatic areas of responsibility include overseeing the EAC’s efforts in testing and certifying voting systems, working with the National Voluntary Laboratory Accreditation Program (NVLAP) of NIST to accredit independent testing laboratories, and developing and maintaining the EAC’s Voluntary Voting System Guidelines.

Brian Hancock has served on the staff of the U.S. Election Assistance Commission (EAC) since its establishment under the Help America Vote Act (HAVA) in 2003. As Director of the Testing and Certification Division, Mr. Hancock’s programmatic areas of responsibility include overseeing the EAC’s efforts in testing and certifying voting systems, working with the National Voluntary Laboratory Accreditation Program (NVLAP) of NIST to accredit independent testing laboratories, and developing and maintaining the EAC’s Voluntary Voting System Guidelines.

10:30 a.m.–11:00 a.m. Tuesday

Break with Refreshments

Harbor Foyer

11:00 a.m.–noon Tuesday

Keynote Address

Being Comfortable with Being Uncomfortable-Modernizing Voting Systems for the 21st Century

11:00 am-12:00 pm

Dean Logan, Registrar-Recorder/County Clerk, Los Angeles County, California

Dean Logan is the Registrar-Recorder/County Clerk for Los Angeles County, California—the nation’s largest, most diverse and complex local election jurisdiction. In addition to serving as the ex officio Supervisor of Elections, the Registrar-Recorder/County Clerk records real property documents; maintains vital records of births, deaths and marriages; issues marriage licenses; performs civil marriage ceremonies; and processes business filings and other documents for Los Angeles County; serving an estimated 3,500 customers daily.

Prior to relocating to Southern California, Mr. Logan served as Director of Records, Elections and Licensing Services in King County, Washington (metropolitan Seattle/Puget Sound), as the Washington State Elections Director and as the elected County Clerk in Kitsap County, Washington.

Dean Logan is the Registrar-Recorder/County Clerk for Los Angeles County, California—the nation’s largest, most diverse and complex local election jurisdiction. In addition to serving as the ex officio Supervisor of Elections, the Registrar-Recorder/County Clerk records real property documents; maintains vital records of births, deaths and marriages; issues marriage licenses; performs civil marriage ceremonies; and processes business filings and other documents for Los Angeles County; serving an estimated 3,500 customers daily.

Prior to relocating to Southern California, Mr. Logan served as Director of Records, Elections and Licensing Services in King County, Washington (metropolitan Seattle/Puget Sound), as the Washington State Elections Director and as the elected County Clerk in Kitsap County, Washington.

Currently, Mr. Logan serves on the Executive Board for the California Association of Clerks and Election Officials (CACEO) and the Pew Center on the States’ Voter Registration Modernization and Performance Index for Elections working groups. He is an active participant in the Future of California Elections collaborative; an initiative sponsored and funded by the James T. Irvine Foundation. Past work includes serving on the California Statewide Voter Registration System Advisory Committee and on the National Election Center’s Task Forces on Education & Training and Election Reform.

In 2007, Mr. Logan served as an international elections observer in Morocco on behalf of the National Democratic Institute (NDI). He is the recipient of the 2013 Los Angeles County Quality and Productivity Commission’s Chair Leadership Award and has been previously recognized for distinguished leadership by Sprint USA, the National Association of Community Leadership and the Election Verification Network.

Mr. Logan holds a degree in Organizational Leadership from Azusa Pacific University and earned an Executive Master of Public Administration degree through the Evans School of Public Affairs at the University of Washington. Additionally, he is an instructor for the Public Sector MPA program at California State University, Northridge.

Noon–1:30 p.m. Tuesday

Luncheon for Workshop Attendees

Harbor GH

1:30 p.m.–3:00 p.m. Tuesday

E2E in Practice

Faster Print on Demand for Prêt à Voter

5:30 pm

Chris Culnane and James Heather, University of Surrey; Rui Joaquim and Peter Y. A. Ryan, University of Luxembourg; Steve Schneider, University of Surrey; Vanessa Teague, University of Melbourne

Printing Prêt à Voter ballots on demand is desirable both for convenience and security. It allows a polling station to serve numerous different ballots, and it avoids many problems associated with the custody of the printouts. This paper describes a new proposal for printing Prêt à Voter ballots on demand. The emphasis is on computational efficiency suitable for real elections, and on very general ballot types.

Available Media

Usability of Voter Verifiable, End-to-end Voting Systems: Baseline Data for Helios, Prêt à Voter, and Scantegrity II

3:45 pm

 Claudia Z. Acemyan, Philip Kortum, Michael D. Byrne, and Dan S. Wallach, Rice University

In response to voting security concerns, security researchers have developed tamper-resistant, voter verifiable voting methods. These end-to-end voting systems are unique because they give voters the option to both verify the system is working properly and to check that their votes have been recorded after leaving the polling place. While these methods solve many of the security problems surrounding voting with traditional methods, the systems’ added complexity might adversely impact their usability. This paper presents an experiment assessing the usability of Helios, Prêt à Voter, and Scantegrity II. Overall, the tested systems were exceptionally difficult to use. Data revealed that success rates of voters casting ballots on these systems were extraordinarily low. Specifically, only 58% of ballots were successfully cast across all three systems. There were reliable differences in voting completion times across the three methods, and these times were much slower than previously tested voting technologies. Subjective usability ratings differed across the systems, with satisfaction being generally low, but highest for Helios. Vote verification completion rates were even lower than those for vote casting. There were no reliable differences in ballot verification times across the three methods, but there were differences in satisfaction levels, with satisfaction being lowest for Helios. These usability findings—especially the extremely low vote casting completion rates—highlight that it is not enough for a system to be secure; every system must also be usable. 

Available Media
3:00 p.m.–3:30 p.m. Tuesday

Break with Refreshments

Harbor Foyer

3:30 p.m.–5:00 p.m. Tuesday

Panel on Estonian Internet Voting

Alex Halderman, Harri Hursti, and Sven Heiberg