UOCAVA Roadmap Update

1
UOCAVA Roadmap Update

• Nelson Hastings, Ph.D.
• Technical Project Leader for Voting Standards,
  ITL
• http//vote.nist.gov

2
Purpose

• Provide an update on the UOCAVA roadmap presented
  at the last TGDC meeting

3
Completed Activities

• EAC guidelines for kiosk-based remote voting
  pilot projects
• Uniformed and Overseas Citizens Absentee Voting
  Act (UOCAVA) Pilot Program Testing Requirements
• Final version released August 25, 2010
• UOCAVA Solutions Summit organized by FVAP, EAC,
  and NIST
• Held August 6-7, 2010 in DC
• FVAPs Electronic Voting Support Wizard (EVSW)
  pilot program
• Utilized in November 2010 election

4
Completed Activities

• FVAP Metrics December 2010
• NISTIR 7770 Security Considerations for Remote
  Electronic UOCAVA Voting
• Final version released February 23, 2011
• EAC, FVAP, and NIST provided EACs Advisory
  Boards with information about legal, technical,
  and policy issues associated with remote election
  voting systems
• Panelists at Standard Board meeting on February
  24-25, 2011 in Oklahoma City
• Presentations at Board of Advisors meeting on
  June 6-7, 2011 in DC

5
Completed Activities

• TGDCs Draft Accessibility and Usability
  Considerations for UOCAVA Remote Voting Systems
• Delivered to EAC on March 2, 2011
• Identify possible 2012 pilot projects for TGDC
  development material
• TGDC whitepaper titled Possible UOCAVA Pilot
  Projects for the 2012-2014 Federal Election
  delivered to EAC on March 2, 2011

6
Completed Activities

• FVAP provided a detailed description of the
  extent and nature of UOCAVA voter successes and
  the applicability of historical programs to
  address the causes of lower success rates
• Part of the 2008 Post Election Survey Report
  released on March 17, 2011
• FVAP organized a Secure Ballot Delivery workshop
• Follow-up to the UOCAVA Solutions Summit
• EAC and NIST participated in workshop
• Held on March 23-24, 2011 in Chicago

7
Ongoing Activities

• NIST leading effort for Common Data Format for
  blank ballot delivery in conjunction with IEEE
• Currently in the IEEE editorial review process
• Out for IEEE-SA ballot in August 2011
• Approved version Fall 2011
• FVAP Cyber Security Review Group (CSRG)
• First meeting held on July 1, 2011
• Provide background and outline objectives of CSRG
• Describe FVAP program of work for UOCAVA voting
• Next meeting scheduled for November 2011
• Presentation of initial results from voting
  system test laboratory testing and penetration
  testing

8
Ongoing Activities

• NISTIR 7711Security Best Practices for the
  Electronic Transmission of Election Materials for
  UOCAVA Voters
• Final version August 2011
• NISTIR 7682 Information System Security Best
  Practices for UOCAVA-Supporting Systems
• Final version August 2011
• EAC is collecting and compiling information on
  previous international internet voting efforts
• Tentatively titled A Survey of Internet Voting
  and Associated Risk
• Final version August 2011

9
Ongoing Activities

• TGDC development of high-level guidelines for
  remote electronic absentee voting systems
• UOCAVA working group will present a draft version
  for discussion at this meeting
• FVAPs Electronic Absentee System for Elections
  (EASE) grant program
• Grants to support blank ballot distribution to
  UOCAVA voters for November 2012 deployment
• Applications received by July 11, 2011 currently
  under review

10
Ongoing Activities

• UOCAVA Solutions working group organized by FVAP
• Follow-up to the Secure Ballot Delivery workshop
• EAC and NIST to participate in working group
• Next meeting scheduled for August 6-7, 2011 in
  San Francisco
• FVAP review of 2010 state activities for UOCAVA
  voters
• Final report October 2011
• FVAP lessons learned review of EVSW pilot program
• Final report October 2011

11
Ongoing Activities

• FVAP is having voting system testing laboratories
  (VSTLs) test five EVSW wizards to the security
  requirements in EACs UOCAVA Pilot Program
  Testing Requirements
• Final report October 2011
• Mock election and penetration testing organized
  by FVAP to be held on August 2-4, 2011
• Four teams will perform penetration
• Final report October 2011
• FVAP Wounded Warrior project demonstration
  August 24-28, 2011

12
Future Activities

• TGDC to develop requirements for the UOCAVA
  demonstration project
• UOCAVA working group in the process of developing
  their approach and will provide update at this
  meeting
• TGDC to develop risk analysis of the current
  UOCAVA voting process
• UOCAVA working group in the process of developing
  its approach and will provide update at this
  meeting
• Update of EACs UOCAVA best practices
• Due to limited EAC resources no timeline can be
  provided

13
Future Activities

• 2012 FVAP pilot projects
• Utilization of EASE grant funded projects from
  FVAP
• November 2012
• FVAP review of EASE grant lessons learned
• Review of the EASE grant funded projects used in
  the 2012 election
• Final report August 2013
• TGDC to provide technical support in analysis of
  lessons learned from 2012 pilot projects
• Spring/Summer 2013, if requested by FVAP

14
Discussion/Questions
Page 14