Election Security

The Threat Landscape

Election security encompasses protection against multiple threats: cyberattacks on voting infrastructure, foreign interference campaigns, insider manipulation, and physical disruption. Russia's interference in the 2016 US presidential election, which included hacking Democratic Party emails, targeting state election systems, and running social media disinformation campaigns, elevated election security from a niche concern to a top national security priority.

The attack surface is broad. Voter registration databases can be targeted to delete or alter records. Voting machines can be hacked if they are connected to networks or if their supply chain is compromised. Election night reporting systems can be attacked to sow confusion (even if actual vote counts are secure). And disinformation campaigns can undermine public confidence in results without touching any election infrastructure.

Defending Elections

Effective election security combines multiple layers. Paper ballots with voter-verified paper audit trails provide a physical record that cannot be hacked. Post-election audits (particularly risk-limiting audits, which use statistical sampling to verify results) detect manipulation. Air-gapping voting machines from the internet prevents remote attacks. Robust cybersecurity for voter registration databases, including intrusion detection and redundant backups, protects voter rolls.

Equally important is resilience: designing systems that can detect and recover from attacks rather than assuming attacks can be prevented entirely. The US Cybersecurity and Infrastructure Security Agency (CISA), established in 2018, coordinates election security support for state and local jurisdictions. But the decentralized nature of US elections, with over 8,000 jurisdictions, makes uniform security standards difficult to achieve.

Matching Threats to Defenses

Different threats require different countermeasures. The table below maps common attack vectors to the defenses that best address them, illustrating why no single tool is sufficient and why defense-in-depth is the guiding principle of modern election security.

Worked example: the 2020 Georgia audit

After the 2020 US presidential election, Georgia faced intense claims of manipulation. Because the state used hand-marked and machine-marked paper ballots, officials could conduct a full hand recount of roughly 5 million presidential ballots in November 2020. The hand count of the paper record confirmed the machine tally within a fraction of a percent, and a subsequent machine recount requested by the Trump campaign reaffirmed the result. This is the paper-trail-plus-audit defense working exactly as designed: the physical record served as an independent, hack-proof check on the electronic count.