Help America Vote Act HAVA Roadmap Nelson Hastings

Help America Vote Act (HAVA) Roadmap Nelson Hastings National Institute of Standards and Technology http: //vote. nist. gov TGDC Meeting, Jan 2011

Background n n Provide a context for current and future TGDC activities in support of the Help America Vote Act (HAVA) HAVA activities include n n n VVSG 1. 1 requirements and associated test methods VVSG 2. 0 requirements and associated test methods Research to support guideline and test development n n n Framework for evaluating risk among election technology options Common data format Marginal marks Usability performance testing Open ended vulnerability testing TGDC Meeting, Jan 2011 Page 2

FY 11 Goals n n Complete draft common data format standard to support voting systems Finalize VVSG 1. 1 for EAC approval Develop initial guidelines for epollbooks and ballot on demand systems Develop standardized set of marginal marks TGDC Meeting, Jan 2011 Page 3

FY 12 Goals n n n Complete material to support UOCAVA pilot projects Complete draft common data format standard Finalize draft VVSG 2. 0 for public comment TGDC Meeting, Jan 2011 Page 4

FY 13 Goals n n Resolve public comments on draft VVSG 2. 0 Finalize VVSG 2. 0 for EAC approval TGDC Meeting, Jan 2011 Page 5

VVSG 1. 1 n n VVSG 1. 1 incorporated requirements from the VVSG 2. 0 that were not controversial and did not require hardware changes Technical areas included: n n Accessibility and usability requirements Operational temperature and humidity requirements Electronic records, security specifications, software setup validation, and VVPAT requirements Core functionality, reliability and accuracy requirements TGDC Meeting, Jan 2011 Page 6

VVSG 1. 1 n n n The public comments associated with the VVSG 2. 0 requirements where resolved and factored into the VVSG 1. 1 requirements VVSG 1. 1 was released for public comment Hardware, security, and accessibility and usability requirements text has been completed Finalizing reliability and accuracy requirement text Finalize for EAC approval: March/June 2011 TGDC Meeting, Jan 2011 Page 7

VVSG 1. 1 n VVSG 1. 1 test suite is based on the VVSG 2. 0 test methods associated with back ported requirements n n Complete test suite validation - October 2011 Integrate test suite into certification program - December 2011 TGDC Meeting, Jan 2011 Page 8

VVSG 2. 0 n At the December 2009 TGDC meeting, the EAC asked the TGDC to provide assistance with developing input to the VVSG 2. 0 for: n n n n Alternatives to Software Independence Common Data Format Open Ended Vulnerability Testing Accessibility and Usability Research Epollbooks Ballot on demand Vote-by-phone Registration databases TGDC Meeting, Jan 2011 Page 9

Current Activities n Alternatives to Software Independence n n The audibility working group was formed Resulting in Report of the Audibility Working Group This report sets the stage for the development of new auditability requirements Common Data Format n n Development of a common data format to support UOCAVA blank ballot delivery Part of a larger common data format effort to address voting system interfaces TGDC Meeting, Jan 2011 Page 10

Current Activities n Accessibility and Usability Research n n n The accessibility and usability working group was formed Accessibility and usability gap analysis conducted Research being conducted in areas of manual dexterity and switch technology Validation of test methods including workflow analysis The results of these activities will influence the accessibility and usability requirements TGDC Meeting, Jan 2011 Page 11

Current Activities n Open Ended Vulnerability Testing n n n Part of the EAC’s UOCAVA pilot project certification process NIST conducting research in the applicability of software assurance case methodology Working to incorporate test method into the VVSG certification process TGDC Meeting, Jan 2011 Page 12

Finalizing VVSG 2. 0 n n Technical modifications to the VVSG 2. 0 have been identified since the August 2007 release and need to be incorporated Develop a baseline of VVSG 2. 0 incorporating technical modifications based on: n n n Errata developed since VVSG 2. 0 release Lessons learned from VVSG 2. 0 test method development Public comments with simple resolutions Lessons learned from VVSG 1. 1 development Completed by July 2011 TGDC Meeting, Jan 2011 Page 13

Finalizing VVSG 2. 0 n n Develop draft VVSG 2. 0 for public comment starting from the baseline Incorporating technical modifications based on n Public comments with complex resolutions Research results New technical areas addressed n n Common data format requirements Auditability requirements Epollbook requirements Ballot on demand requirements TGDC Meeting, Jan 2011 Page 14

Finalizing VVSG 2. 0 n n Finalize for public comment by December 2012 Finalize for EAC approval in 2013 TGDC Meeting, Jan 2011 Page 15

Discussion TGDC Meeting, Jan 2011 Page 16