In the previous edition, the security of Maryland’s online voter registration system was discussed, based upon a talk given by Nikki Charlson, Deputy Director of the Maryland State Board of Elections, delivered on April 25 to the League of Women Voters of Kent County in Chestertown. In addition to registration, Ms. Charlson also spoke on the security measures taken to protect the actual voting process. Charlson noted first that Maryland was one of the states which incurred suspicious behavior in its online system in 2016. The system was shut down immediately and the FBI was called in. After a thorough investigation, the FBI reported that the security of the data was preserved. She also reported that the Maryland Board of Elections had discovered in 2016 that one of their off-site vendors had a connection to a Russian oligarch that they had not been aware of. Homeland Security investigated and concluded that the system had not been compromised. When asked if she believed that the Russians had interfered in our election, she answered that there could be no doubt that they had. When asked how the Board could trust the federal agencies that investigated the situation when the chief executive of the country denies that there was Russian interference, her response was that the people they deal with have been working in their agencies for a long time—long before the current administration—and are responsible professionals.
In Maryland, all voters vote on paper ballots. These can be re-tabulated if there is a need to do so. Each ballot scanner used in local polling places has a removable USB memory drive that stores both individual and accumulated results and digital images of all voter ballots. It does not count the votes, however. The network adds the results from the memory drives and generates official results. Our voting system has been rigorously tested by a federally accredited laboratory and certified by the U.S. Election Assistance Commission. No part of the system is connected to the internet. Election results are never sent via modem over telephone lines. A local official puts the results onto a memory device and takes the device to a computer with access to a primary and a secondary secure server. Data are transferred either via an encrypted tunnel or Secure File Transfer Protocol. The results released on election night are not official. The day after the election, all USB memory drives are uploaded again and the official election results process begins.
The following security measures are taken to guarantee that our election results have not been tampered with and are correct:
Charlson stated that the Department of Homeland Security partners with them on a regular basis and monitors network data. They have never found a vulnerability, she said. All election equipment is housed by local offices, and Homeland Security will come out and do an audit to be sure that the equipment is safe. There is a post-election audit in each locality. Ballots are scanned, then sent to a separate company for a count. The counts are compared. Additionally, legislation passed in 2018 will also require a manual count.
In conclusion, there are rigorous and improved (since 2016) security systems in place in Maryland that should help keep our state’s voting process safe, even against potential computer hackers, either domestic or foreign.
Sources: Notes taken from Nikki Charlson’s talk for the LWVKC Annual Meeting and handouts from the Maryland State Board of Elections
Title image: Pond at Pickering Creek Audubon Center, Talbot Co. Photo: Jan Plotczyk