This month we deviate from our usual fare, with a fascinating look
at security and voting machines. Since this is a topic of concern
for all citizens, please forward this invitation to other interested
parties.
Best regards,
Suzanne Garner
February 25, 2009
SILICON VALLEY SOFTWARE & SYSTEMS PROCESS IMPROVEMENT NETWORK
(SV-SPIN)
Security in the Election Process and Voting Machines
Joy Forsythe
Fortify Software
ABSTRACT
"Security in the Election Process and Voting Machines"
Elections are the core of the democratic process. In order for an
election to remain truly democratic, it must uphold four critical
properties: privacy, incoercibility, accuracy and verifiability.
This presentation will discuss threats against these properties,
summarize the strengths and weaknesses of current voting techniques,
and compare security in voting systems and business systems. It will
conclude with a look to the future of voting systems in America and
recommendations for how the federal government and state governments
can work with voting machine vendors to adopt business software
assurance techniques into the systems they create.
SPEAKER BIO
Joy Forsythe is a member of the Security Research Group at Fortify
Software, where she is responsible for developing security content
for the Fortify suite of products. Prior to joining Fortify, Ms.
Forsythe worked for Oracle, where she designed and implemented the
encryption and storage optimization features for SecureFiles. At MIT
she was a Research Assistant in the Computer Science and Artificial
Intelligence Laboratory, where she worked under Professor Ron Rivest
on electronic voting and cryptography. She holds a M.E. and a B.S.
in Computer Science and Engineering from MIT.
ABOUT THE SV-SPIN MEETING
WHEN: Wednesday, Febuary 25, 2009
5:45 - 6:15 Sign-in, Refreshments, Networking
6:15 - 6:30 Introduction and SV-SPIN Business
6:30 - 7:45 Talk
7:45 - 8:15 Networking
LOCATION: Cisco Systems
Boiler Maker Conference Room, 1st floor Building 24 510 McCarthy
Blvd., Milpitas, California 95035
MAP: http://www.svspin.org/cisco.htm
Building Info:
Enter the lobby and the conference room is on the left as you face
the building. We normally have someone in the lobby up until the
presentation starts to let people in the front door. But, if no one
is there and the door is locked you should be able to get someone's
attention by standing near the windows to the left of the front door.
There will be a sign-in sheet and name badges at the reception desk
in the lobby.
If you have any questions e-mail saarnold@... or phone 408-525-
0802.
See below for information on joining the meeting via voice/web
conference.
RSVP: Please RSVP by email before Monday, February 23, 2008 to
Steve Arnold
Email: saarnold@...
SV-SPIN CONTACT: Suzanne Garner
E-mail: sv_spin@...
SPIN HomePage: http://www.svspin.org
SV_SPIN meetings are held the last Wednesday of each month.
(r) Capability Maturity Model, Capability Maturity Modeling, Carnegie
Mellon, CERT, CERT Coordination Center, CMM, and CMMI are registered
in the U.S. Patent and Trademark Office by Carnegie Mellon
University.
SM Architecture Tradeoff Analysis Method; ATAM; CMM Integration;
CURE;
IDEAL; Interim Profile; OCTAVE; Operationally Critical Threat, Asset,
and Vulnerability Evaluation; Personal Software Process; PSP; SCAMPI;
SCAMPI Lead Assessor; SCAMPI Lead Appraiser; SCE; Team Software
Process; and TSP are service marks of Carnegie Mellon University.
Date/Time: Febuary 25, 2009 at 06:00PM
America /Los_Angeles
Length: 120
Frequency: once
Meeting ID: 131505131
Global Access Numbers:
http://cisco.com/en/US/about/doing_business/conferencing/index.html
US/Canada: +1.866.432.9903
TO ATTEND A WEB AND VOICE CONFERENCE
CISCO INTRANET ATTENDEES
Join the Web & Voice Conference*
1. Go to http://meetingplaceinternal.cisco.com/join.asp?131131505131
2. Enter your CEC User ID & Password then click OK
- Accept any security warnings you receive and wait for the Meeting
Room to initialize
3. Click on CONNECT from the Meeting Room to join the Voice
Conference portion of the meeting
EXTERNAL ATTENDEES - Outside the Cisco Intranet**
Join the Web & Voice Conference*
1. Go to http://meetingplace.cisco.com/join.asp?131505131
2. Fill in the My Name is field then click Attend Meeting
- If you have a CEC User ID, click on the Cisco icon
- Accept any security warnings you receive and wait for the Meeting
Room to initialize
3. Click on CONNECT from the Meeting Room to join the Voice
Conference portion of the meeting
- Note: Guest users will see a link to the Global Access Numbers.
*If this is your first time attending a Web Conference, disable any
pop-up blockers and visit
http://meetingplace.cisco.com/mpweb/scripts/browsertestupper.asp to
test your web browser for compatibility with the Web Conference.
**Not all meetings are scheduled to allow external attendees into the
Web Conference portion of the meeting, if the URL does not work,
please follow the Voice only Conference instructions below to attend.
TO ATTEND A VOICE ONLY CONFERENCE
1. Dial into Cisco Unified MeetingPlace (view the Access Numbers or
link above)
2. Press 1 to attend the meeting
3. Follow the prompts to enter the Meeting ID 131131505131 and join
the meeting
SUPPORT
Information about this Conference: Contact Steve Arnold, 14085250802
Cisco IT Support Center : Attend the Voice Conference and then press
#0 on your phone keypad