Incident: Georgia's High-Tech Voting System Failure During Primary Elections.

Published Date: 2020-06-11

Postmortem Analysis
Timeline 1. The software failure incident happened in Georgia during the primary elections on Tuesday, as reported in Article 100891. Therefore, the estimated timeline for the incident would be June 2020.
System 1. Dominion Voting Systems' Democracy 5.5 system [100891] 2. Electronic poll books [100891]
Responsible Organization 1. Poor preparation at the county level was blamed by Georgia's secretary of state, Brad Raffensperger, for most of the problems during the election [100891]. 2. The new voting system's complexity, hasty training, and a crush of tasks associated with both mail ballots and in-person voting operations contributed to the software failure incident [100891]. 3. The new voting system's design, including the interlocking digital devices and multiple components, was described as overly complex by experts, potentially leading to the failure incident [100891].
Impacted Organization 1. Voters in Georgia [Article 100891] 2. Poll workers in Georgia [Article 100891] 3. Georgia State Legislature [Article 100891]
Software Causes 1. Software glitch in the electronic poll books causing delays in the 2019 elections test [100891] 2. Freezing software and user error in the electronic poll books [100891]
Non-software Causes 1. Poor preparation at the county level was blamed for most of the problems by Georgia's secretary of state [100891]. 2. Issues with activating voter verification cards, difficulties with the physical setup of the machines, and problems with training and staffing of poll workers were highlighted as contributing factors to the failure incident [100891].
Impacts 1. Block-long lines across Georgia with primary voters standing for hours due to equipment delivery delays and struggles to activate system components, leading to voters leaving without voting [100891]. 2. Locations running out of provisional ballots, further exacerbating the voting delays and chaos [100891]. 3. Poll workers facing challenges with the new voting machines, including boot-up failures, PIN authorization issues, and lack of proper training on troubleshooting scenarios [100891]. 4. Electronic poll books experiencing freezing software and user errors, adding to the overall voting system failures [100891]. 5. Voter verification cards facing difficulties in activation, causing delays in the voting process [100891]. 6. The software glitch in the electronic poll books during a small-scale test in 2019 causing delays in multiple counties, indicating prior knowledge of potential problems with the system [100891]. 7. Overall, the software failure incident led to a chaotic voting experience, disenfranchisement of voters, and a loss of confidence in the new voting system [100891].
Preventions 1. Proper and thorough training for poll workers on how to operate the new voting system could have prevented the software failure incident [100891]. 2. Conducting more extensive testing and pilot programs to identify and address any software glitches or issues before a full-scale rollout could have prevented the incident [100891]. 3. Implementing a slower and more gradual rollout of the new voting system to allow for smoother implementation and troubleshooting of any software problems could have prevented the incident [100891]. 4. Choosing a voting system with simpler technology and fewer components to reduce the likelihood of software failures could have prevented the incident [100891].
Fixes 1. Implement thorough and comprehensive training for poll workers on how to operate the new voting system, including troubleshooting scenarios and technical issue resolution [100891]. 2. Conduct a detailed review and analysis of the software and hardware components of the voting system to identify and address any potential glitches, faults, or defects that may be causing the failures [100891]. 3. Consider simplifying the voting system to reduce complexity and the number of interlocking digital devices involved, potentially transitioning to a system with hand-marked paper ballots to minimize points of failure [100891]. 4. Enhance communication and coordination between the state government, election officials, vendors, and stakeholders to ensure proper preparation and readiness for future elections, avoiding last-minute deployments and inadequate training [100891]. 5. Conduct a post-incident analysis to identify root causes of the software failure, learn from the mistakes made during the rollout, and implement corrective actions to prevent similar failures in future elections [100891].
References 1. Federal judge Amy Totenberg [Article 100891] 2. Charles Stewart III, political scientist at the Massachusetts Institute of Technology [Article 100891] 3. Jonathan Banes, precinct captain at Cross Keys High School in suburban DeKalb County [Article 100891] 4. Kay Stimson, director of government relations for Dominion Voting Systems [Article 100891] 5. Andrew Appel, computer scientist at Princeton [Article 100891] 6. Marilyn Marks, executive director of the Coalition for Good Governance [Article 100891] 7. David Becker, executive director of the Center for Election Innovation and Research [Article 100891] 8. Georgia’s secretary of state, Brad Raffensperger [Article 100891] 9. Lewis Abit Massey, lobbyist for Dominion Voting Systems [Article 100891] 10. Jared Thomas, lobbyist for Dominion Voting Systems [Article 100891] 11. Stacey Abrams, founder of Fair Fight [Article 100891] 12. Katina Granger, spokeswoman for Election Systems & Software [Article 100891] 13. Duncan Buell, professor of computer science at the University of South Carolina [Article 100891]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident related to Dominion Voting Systems has happened before. In 2019, during a small-scale test in Georgia, a software glitch in the electronic poll books caused delays in most of the six counties where the test took place [100891]. (b) Similar incidents related to ballot-marking systems have occurred in other states as well. For example, in Pennsylvania, multiple counties, including Philadelphia, experienced problems with the ExpressVote XL machines manufactured by Election Systems & Software during the 2019 off-year elections. Issues included faulty results, glitchy touch screens, and performance issues in over 40% of locations [100891].
Phase (Design/Operation) design, operation (a) The software failure incident in Georgia's voting system can be attributed to design factors introduced during the system development and rollout phases. The new voting system was criticized for being too convoluted, expensive, and insecure, with warnings about its perils being raised by good-government groups, election-security experts, and a federal judge [100891]. The system was described as a "Rube Goldberg contraption with way more components than are needed," indicating issues with the complexity of the design [100891]. Additionally, the system's design complexity led to problems such as machines requiring too much power for aging polling locations, workers struggling with setup, and delays caused by a software glitch in the electronic poll books during a small-scale test in 2019 [100891]. (b) The software failure incident in Georgia's voting system can also be attributed to operational factors introduced during the system's operation. Poll workers faced challenges with activating voter verification cards, freezing software, and user errors with the electronic poll books [100891]. Issues with the operation of the system were evident as workers were still being trained just days before the election, and some polling places did not receive the machines until the morning of the election, leading to delays and technical difficulties during the voting process [100891].
Boundary (Internal/External) within_system (a) The software failure incident in Georgia's voting system can be attributed to factors within the system. The incident was caused by a cascade of problems within the new voting system, including issues with the new voting machines, electronic poll books, and voter verification cards [100891]. The problems included software glitches in the electronic poll books, freezing software, user errors, difficulties activating voter verification cards, and a complex voting process involving multiple digital devices [100891]. Additionally, the incident involved issues with training, setup, and technical support for the new system, indicating internal challenges within the system itself [100891].
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident in Georgia's primary election was attributed to non-human actions such as a cascade of problems causing block-long lines, machines requiring too much power for aging polling locations, software glitches in the electronic poll books, freezing software, and user errors in the electronic poll books [100891]. (b) On the other hand, human actions also played a role in the failure, as there were issues with poor preparation at the county level, inadequate training of poll workers, difficulties in activating voter verification cards, and problems with setup due to workers being trained just days before the election [100891].
Dimension (Hardware/Software) hardware, software (a) The software failure incident in Georgia's election system was attributed to hardware issues as well. The new voting machines required too much extra power for aging polling locations, causing fuses to blow and machines not to power on in some cases. Workers who were still being trained just days before the election struggled with setup, and some polling places did not even receive the machines until the morning of the election [100891]. (b) Additionally, the software failure incident in Georgia's election system was also linked to software issues. During a small-scale test in 2019, a software glitch in the electronic poll books caused delays in most of the six counties where the test took place. The new system was described as "way too complex" and a "Rube Goldberg contraption with way more components than are needed" by experts, indicating software complexity as a contributing factor to the failure [100891].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident in Georgia related to the voting system can be categorized as non-malicious. The incident was primarily attributed to a cascade of problems caused by a combination of factors such as the complexity of the new voting system, inadequate training of poll workers, difficulties in activating voter verification cards, freezing software in electronic poll books, and a software glitch in the electronic poll books [100891]. (b) The incident was not reported to be malicious in nature, but rather a result of various issues stemming from the complexity of the new voting system and challenges in its implementation and operation.
Intent (Poor/Accidental Decisions) poor_decisions, accidental_decisions (a) The software failure incident in Georgia's election system can be attributed to poor decisions made in the procurement and implementation process. The decision to purchase the new high-tech voting system was criticized by good-government groups, election-security experts, and a federal judge as being too convoluted, expensive, and insecure [100891]. The system was described as a "Rube Goldberg contraption with way more components than are needed" by an expert [100891]. Additionally, warnings about potential problems with the system were raised after a small-scale test in 2019 revealed a software glitch in the electronic poll books, causing delays [100891]. The decision-making process was influenced by heavy lobbying from vendors, including Dominion Voting Systems, which ultimately won the bid despite concerns raised by various groups [100891]. The complexity of the new system, lack of proper training for poll workers, and issues with equipment activation all point to poor decisions made in the adoption of the voting technology. (b) The software failure incident in Georgia's election system also involved accidental decisions or unintended consequences that contributed to the failure. For example, the new voting machines required too much power for some polling locations, causing fuses to blow and machines not to power on [100891]. Workers who were still being trained just days before the election struggled with setup, and some polling places did not even receive the machines until the morning of the election [100891]. These issues indicate a lack of proper preparation and accidental decisions that led to the failure of the voting system.
Capability (Incompetence/Accidental) development_incompetence, accidental (a) The software failure incident in Georgia's primary election was attributed to various factors that could be categorized under development incompetence. The new high-tech voting system was criticized for being too convoluted, too expensive, and too big, as well as being insecure [100891]. The system's complexity led to a cascade of problems, including block-long lines, equipment delivery delays, struggles with system activation, and running out of provisional ballots. Issues such as blowing fuses due to excessive power requirements, lack of proper training for poll workers, and difficulties with setup were also reported. Moreover, a software glitch in the electronic poll books during a small-scale test in 2019 caused delays, indicating a lack of thorough testing and quality assurance [100891]. (b) The software failure incident in Georgia's primary election also had elements of accidental factors contributing to the failure. Problems with the new voting system included freezing software in electronic poll books, user errors, and difficulties activating voter verification cards [100891]. These issues were not necessarily intentional but rather arose from the complexity of the system and the challenges faced during the rollout process. Additionally, the article mentions that the errors in Northhampton County's election results were attributed to human error in formatting the ballot and improper configuration of machines at the factory, indicating accidental factors playing a role in the failure [100891].
Duration temporary The software failure incident related to the Georgia elections voting system can be categorized as a temporary failure. The incident was caused by a cascade of problems, including issues with new equipment, hasty training, a crush of tasks, and a perfect storm of factors such as the complexity of the voting system, lack of training, and difficulties in setup [100891]. These contributing factors introduced by certain circumstances led to the temporary failure during the primary elections in Georgia.
Behaviour crash, omission, timing, value, byzantine, other (a) crash: The software failure incident in Georgia's voting system involved crashes where the voting machines failed to work as intended, requiring technicians to fix them. For example, at Cross Keys High School, the voting machines failed to boot up, and poll workers had to call in a technician to address the issue [100891]. (b) omission: The software failure incident also involved omissions where the new machines omitted to perform their intended functions, leading to delays and problems during the election. For instance, in some polling places, the new machines required too much power for aging locations, blowing fuses and not powering on, while in others, workers who were still being trained struggled with setup [100891]. (c) timing: The timing of the software failure incident was also a significant issue. The incident involved the system performing its intended functions, but either too late or too early, causing disruptions during the election process. For example, some polling places never received the machines until the morning of the election, leading to delays and chaos [100891]. (d) value: The software failure incident included failures where the system performed its intended functions incorrectly. This was evident in difficulties activating voter verification cards, which are inserted into the machines to start voting. Many problems were related to issues with the activation of these cards [100891]. (e) byzantine: The software failure incident exhibited characteristics of a byzantine failure, where the system behaved erroneously with inconsistent responses and interactions. The incident involved a cascade of problems, freezing software, user errors, and a series of interlocking digital devices that experts described as dizzying in complexity, leading to widespread issues during the election [100891]. (f) other: The software failure incident also involved other behaviors not covered by the specific options listed. This includes problems such as the system being too convoluted, too expensive, and too big, as well as difficulties with training, setup, and the overall complexity of the voting system. The incident was described as a "perfect storm" of new equipment, hasty training, and a crush of tasks associated with the election process [100891].

IoT System Layer

Layer Option Rationale
Perception processing_unit, embedded_software (a) sensor: The software failure incident in Georgia's voting system was not directly related to sensor errors. The issues primarily stemmed from the complexity and challenges in implementing the new high-tech voting system, including problems with equipment delivery, setup, activation, and user errors [100891]. (b) actuator: The failure was not directly attributed to actuator errors in the cyber-physical system. The problems were more related to the overall complexity of the voting system, difficulties in training poll workers, and challenges in activating voter verification cards [100891]. (c) processing_unit: The software failure incident did involve issues related to the processing unit of the voting system. Problems such as software glitches in the electronic poll books, freezing software, and user errors were reported, contributing to delays and operational challenges during the election [100891]. (d) network_communication: The failure was not primarily due to network communication errors. The main issues were related to the functionality and setup of the new voting system, training inadequacies, and difficulties in activating voter verification cards, rather than network communication failures [100891]. (e) embedded_software: The software failure incident did involve problems related to embedded software errors. Reports mentioned software glitches in the electronic poll books during a small-scale test in 2019, which caused delays in multiple counties, indicating issues with the embedded software components of the voting system [100891].
Communication unknown The software failure incident related to the Georgia voting system does not directly point to a specific failure at the communication layer of the cyber-physical system. However, the incident involved a cascade of problems, including issues with new voting machines, electronic poll books, freezing software, user errors, and difficulties activating voter verification cards [100891]. These issues suggest a combination of factors beyond just the communication layer, such as software glitches, training deficiencies, and equipment setup challenges.
Application FALSE The software failure incident related to the Georgia voting system does not seem to be directly related to the application layer of the cyber physical system. The reported issues primarily revolve around the complexity, training inadequacies, equipment delivery problems, and user errors rather than specific application-related failures like bugs, operating system errors, unhandled exceptions, or incorrect usage [100891]. Therefore, it is unknown if the failure was specifically related to the application layer of the cyber physical system.

Other Details

Category Option Rationale
Consequence delay The consequence of the software failure incident described in the articles is primarily related to delays [(Article 100891)]. The software failure incident in Georgia's primary elections led to block-long lines, voters waiting for hours, locations running out of provisional ballots, and many people leaving the lines without being able to vote due to problems with the new voting system. The incident caused chaos and delays in the voting process, impacting people's ability to exercise their right to vote.
Domain government The software failure incident discussed in the articles is related to the **government** industry. The incident specifically pertains to the rollout of a high-tech voting system in Georgia, which experienced a cascade of problems during the primary elections, causing long lines, equipment delivery delays, activation struggles, and other issues [Article 100891]. The failure of the voting system, which involved new digital devices and software glitches, impacted the voting process and led to chaos during the election, highlighting the challenges and complexities associated with implementing such technology in the government sector.

Sources

Back to List