Cyber & IT Supervisory Forum - Additional Resources

TABLE OF CONTENTS GOVERN .......................................................................................................................... Govern 1.......................................................................................................................... Govern 1.1................................................................................................................. Govern 1.2................................................................................................................. Govern 1.3................................................................................................................. 4 Potential Attacks and Vulnerabilities..................................................................... 4.1 Methodology...................................................................................................... 4.2 Attacks................................................................................................................. 4.2.1 Attack Summary......................................................................................... 4.2.2 Malware....................................................................................................... 4.2.3 Phishing....................................................................................................... 4.2.4 Ransomware............................................................................................... 4.2.5 Denial of Service........................................................................................ 4.2.6 Injection Attack.......................................................................................... 4.2.7 Attacker-in-the-middle............................................................................. 4.3 Vulnerabilities.................................................................................................... 4.3.1 Vulnerable Software Design.................................................................... 4.3.2 Vulnerable or Outdated Components................................................... 4.3.3 Broken or Weak Access Control.............................................................. 5 Threat Analysis ........................................................................................................... 5.1 Methodology...................................................................................................... 5.2 Threat Summary................................................................................................ 5.3 Threats................................................................................................................ 5.3.1 Add false registration................................................................................ 5.3.2 Change registered address...................................................................... 5.3.3 Remove registered voters........................................................................ 5.3.4 Render e-poll book inoperable................................................................ 5.3.5 Prevent e-poll book sync.......................................................................... 5.3.6 Falsify e-poll book sync............................................................................ 5.3.7 Render network inoperable...................................................................... 5.3.8 Alter ballot activation............................................................................... 6 Mitigations .................................................................................................................. 6.1 General Cybersecurity.................................................................................... 6.1.1 Restrict physical network port access................................................... GOVERN ................................................................................................................ Govern 1 .......................................................................................................................... Govern 1.1................................................................................................................. Govern 1.2................................................................................................................. Govern 1.3................................................................................................................. Govern 1.4................................................................................................................. Govern 1.5................................................................................................................. Govern 1.6................................................................................................................. Govern 1.7.................................................................................................................. Govern 2 .......................................................................................................................... Govern 2.1................................................................................................................. Govern 2.2................................................................................................................. Govern 2.3................................................................................................................. Govern 3. ......................................................................................................................... Govern 3.1................................................................................................................ Govern 3.2................................................................................................................ Govern 4 ......................................................................................................................... Govern 4.1............................................................................................................... Govern 4.2............................................................................................................... Govern 4.3............................................................................................................... Govern 5 ........................................................................................................................ Govern 5.1............................................................................................................... Govern 5.2............................................................................................................... Govern 6 ....................................................................................................................... Govern 6.1............................................................................................................... Govern 6.2............................................................................................................... MAP ..................................................................................................................... Map 1 ............................................................................................................................. Map1.1..................................................................................................................... Map 1.2................................................................................................................... Map 1.3................................................................................................................... Map 1.4................................................................................................................... Map 1.5................................................................................................................... Map 1.6................................................................................................................... Map 2 ............................................................................................................................. Map 2.1................................................................................................................... Map 2.2...................................................................................................................

1 2 2 4 7 9

12 14 16 18 18 21 23 25 25 28 31 31 34 37 39 39 42 44 44 47 49 50 50 56 59 61 63 66 69 69 71

i