« Definition: Security Convergence | Main | IBM: Smart Surveillance Systems »

Security Styles: Physical trumps Digital

One of the leading truths about systems security (relating specifically to computers, network equipment, etc.) is that if you have physical access to the box you are trying to attack/hack/infect/subvert then you win. It's not a matter of IF you can access, but how quickly. If you can't physically secure the system from unauthorized parties, it is (or should be considered) unsecured in any manner.

It looks like the election commissions in New Jersey doesn't know this lesson, yet. I can imagine they are used to having equipment delivered before the election, to help facilitate quicker set up on election day (all the fancy little booth/table things, registration tables, etc.) But when the equipment is digital voting machines (aka computers) that the integrity of the entire digital voting process is based upon, then they should be considered sensitive and require security measures.

Now maybe I don't have the whole story; perhaps these systems don't have any hard drives, ROM memory, etc. Maybe they are non-functional shells, and the "important bits" get installed on the morning of election day. However, if I lived in New Jersey I'd be a little concerned.

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)