A Threat Analysis on UOCAVA Voting Systems

This report contains the results of NIST s research into technologies to improve the voting process for United States citizens living overseas. It splits the overseas voting process into three stages: voter registration and ballot request, blank ballot delivery, and voted ballot return. For each stage, this report describes how various transmission options could be used to support overseas voting. The transmission options discussed in this paper are postal mail, telephone, fax, electronic mail, and web-based systems. This report documents a threat analysis based on the methodology provided in NIST SP 800-30 for each method. As part of the analysis, mitigating controls for each threat are provided when possible. The mitigating controls for each threat provided in this report provide the basis for an effort to develop best practices for overseas voting systems.