TGDC Meeting, Jan 2011

Help America Vote Act (HAVA) Roadmap

Nelson HastingsNational Institute of Standards and

Technology

http://vote.nist.gov

TGDC Meeting, Jan 2011 Page 2

Background Provide a context for current and future TGDC activities in support of the Help America Vote Act (HAVA)

HAVA activities include VVSG 1.1 requirements and associated test methods VVSG 2.0 requirements and associated test methods Research to support guideline and test development

Framework for evaluating risk among election technology options

Common data format Marginal marks Usability performance testing Open ended vulnerability testing

TGDC Meeting, Jan 2011 Page 3

FY11 Goals Complete draft common data format standard to support voting systems

Finalize VVSG 1.1 for EAC approval Develop initial guidelines for epollbooks and ballot on demand systems

Develop standardized set of marginal marks

TGDC Meeting, Jan 2011 Page 4

FY12 Goals Complete material to support UOCAVA pilot projects

Complete draft common data format standard

Finalize draft VVSG 2.0 for public comment

TGDC Meeting, Jan 2011 Page 5

FY13 Goals Resolve public comments on draft VVSG 2.0

Finalize VVSG 2.0 for EAC approval

TGDC Meeting, Jan 2011 Page 6

VVSG 1.1 VVSG 1.1 incorporated requirements from the VVSG 2.0 that were not controversial and did not require hardware changes

Technical areas included: Accessibility and usability requirements Operational temperature and humidity requirements Electronic records, security specifications, software setup validation, and VVPAT requirements

Core functionality, reliability and accuracy requirements

TGDC Meeting, Jan 2011 Page 7

VVSG 1.1 The public comments associated with the VVSG 2.0 requirements where resolved and factored into the VVSG 1.1 requirements

VVSG 1.1 was released for public comment Hardware, security, and accessibility and usability requirements text has been completed

Finalizing reliability and accuracy requirement text

Finalize for EAC approval: March/June 2011

TGDC Meeting, Jan 2011 Page 8

VVSG 1.1 VVSG 1.1 test suite is based on the VVSG 2.0 test methods associated with back ported requirements

Complete test suite validation - October 2011 Integrate test suite into certification program - December 2011

TGDC Meeting, Jan 2011 Page 9

VVSG 2.0 At the December 2009 TGDC meeting, the EAC asked the TGDC to provide assistance with developing input to the VVSG 2.0 for:

Alternatives to Software Independence Common Data Format Open Ended Vulnerability Testing Accessibility and Usability Research Epollbooks Ballot on demand Vote-by-phone Registration databases

TGDC Meeting, Jan 2011 Page 10

Current Activities Alternatives to Software Independence

The audibility working group was formed Resulting in Report of the Audibility Working Group This report sets the stage for the development of new auditability requirements

Common Data Format Development of a common data format to support UOCAVA blank ballot delivery

Part of a larger common data format effort to address voting system interfaces

TGDC Meeting, Jan 2011 Page 11

Current Activities Accessibility and Usability Research

The accessibility and usability working group was formed

Accessibility and usability gap analysis conducted Research being conducted in areas of manual dexterity and switch technology

Validation of test methods including workflow analysis

The results of these activities will influence the accessibility and usability requirements

TGDC Meeting, Jan 2011 Page 12

Current Activities Open Ended Vulnerability Testing

Part of the EAC’s UOCAVA pilot project certification process

NIST conducting research in the applicability of software assurance case methodology

Working to incorporate test method into the VVSG certification process

TGDC Meeting, Jan 2011 Page 13

Finalizing VVSG 2.0 Technical modifications to the VVSG 2.0 have been identified since the August 2007 release and need to be incorporated

Develop a baseline of VVSG 2.0 incorporating technical modifications based on:

Errata developed since VVSG 2.0 release Lessons learned from VVSG 2.0 test method development Public comments with simple resolutions Lessons learned from VVSG 1.1 development

Completed by July 2011

TGDC Meeting, Jan 2011 Page 14

Finalizing VVSG 2.0 Develop draft VVSG 2.0 for public comment starting from the baseline

Incorporating technical modifications based on Public comments with complex resolutions Research results

New technical areas addressed Common data format requirements Auditability requirements Epollbook requirements Ballot on demand requirements

TGDC Meeting, Jan 2011 Page 15

Finalizing VVSG 2.0 Finalize for public comment by December 2012

Finalize for EAC approval in 2013

TGDC Meeting, Jan 2011

Discussion

Page 16