Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Audits

CISA Announces Open Source Post-Election Auditing Tool

The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) this week announced the release of an open source post-election auditing tool in preparation for the 2020 elections.

The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) this week announced the release of an open source post-election auditing tool in preparation for the 2020 elections.

CISA says it has teamed up with election officials and their private sector partners to support their efforts in improving post-election auditing in future elections.

Called Arlo, the newly introduced auditing tool is being created by non-partisan, non-profit firm VotingWorks, which is committed to developing secure election technology. The tool includes support for various types of post-election audits across numerous voting systems, including major vendors.

Arlo is built on auditing work performed by Colorado, which in 2017 implemented rigorous Risk-Limiting Audits (RLAs) and conducted audits in over 50 of its 64 counties.

Considered the best safeguard against hacked or faulty voting systems, the RLA is efficient because it eliminates the need to manually recount every vote, VotingWorks explains.

The Arlo open source software is being offered for free to state and local election officials, and their private sector partners. State and local jurisdictions can also use a hosted Software-as-a-Service version of the tool, for a fee.

Advertisement. Scroll to continue reading.

“Arlo provides an easy way to perform the calculations needed for the audit: determining how many ballots to audit, randomly selecting which ballots will be audited, comparing audited votes to tabulated votes, and knowing when the audit is complete,” CISA says.

The initial version of Arlo has support for pilot post-election audits across the country, including several from this month’s elections. Election officials in Pennsylvania, Michigan, Missouri, Virginia, Ohio, and Georgia are among the partners of the pilot program, but some additional partners will be revealed within the following weeks.

“At a time when we know foreign actors are attempting to interfere and cast doubt on our democratic processes, it’s incredibly important elections are secure, resilient, and transparent. For years, we have promoted the value of auditability in election security, it was a natural extension to support this open source auditing tool for use by election officials and vendors, alike,” said CISA Director Christopher Krebs.

Related: Threat to US Elections Not Limited to Russia in 2020

Related: Securing the 2020 Elections From Multifarious Threats

Related: New Election Systems Use Vulnerable Software

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Register

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Register

People on the Move

Tracey Mustacchio has joined Everfox as Chief Marketing Officer.

Mark Carter has been appointed Chief Information Security Officer at Socure.

Spektrum Labs has named Mark Cravotta Chief Operating Officer.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.