Q&A: Sam Houston State University cyber forensics intelligence expert talks foreign election hacking ahead of Nov. 3

Less than a week ahead of the Nov. 3 Election Day, Cihan Varol, an associate professor with Sam Houston State University's Cyber Forensics Intelligence Center, shared insight on foreign election hacking and what it means for voters. (Courtesy Adobe Stock)
Less than a week ahead of the Nov. 3 Election Day, Cihan Varol, an associate professor with Sam Houston State University's Cyber Forensics Intelligence Center, shared insight on foreign election hacking and what it means for voters. (Courtesy Adobe Stock)

Less than a week ahead of the Nov. 3 Election Day, Cihan Varol, an associate professor with Sam Houston State University's Cyber Forensics Intelligence Center, shared insight on foreign election hacking and what it means for voters. (Courtesy Adobe Stock)

Less than a week ahead of the Nov. 3 Election Day, Cihan Varol, an associate professor with Sam Houston State University's Cyber Forensics Intelligence Center, shared insight on foreign election hacking and what it means for voters.

According to Varol,
if a foreign or domestic cyber actor attempts to disrupt, manipulate, destroy or affect the process of the election by using cyberattack practices, this constitutes an election interference; election hacking refers to breaches that are intended to manipulate voter data, change the vote tally or discredit the results. Both types of attacks are tracked by the Federal Bureau of Investigation and the U.S. Cybersecurity and Infrastructure Security Agencies, which regularly meet with local election officials to brief for potential threats.

Varol added security measures include sensors on every state's network to monitor for cyberattacks, and once vulnerabilities are detected, they are patched as soon as possible.

This interview has been edited for length and clarity.


What impact can foreign election hacking have on election outcomes? Are there any specific past examples that you could share?


There is a very slim chance that the hackers can change vote count, but they can definitely influence people to believe that they did manipulate it. If election fraud is going to happen, it'll be because of disinformation. For instance, recently hackers on a Russian forum posted that they had stolen data on voters in Michigan, which raised concerns. Although it is a privacy issue—exposure of Personally Identifiable Information—it has no direct way of changing the vote tally. However, it has the potential to make people not vote if they start to believe that the election is hacked.

Has foreign election hacking always been a concern, or has it become more prevalent in recent election cycles? Why do you think that is?

This was always a concern, but with the recent magnitude of cyber attacks, such as WannaCry, StuxNext, Equifax and Target, not only the attackers increased their attempts after successful breaches, but also the government entities increased their attention for a secure election.

How has election security changed over the past couple of decades? Do you think elections have become more or less secure? Why?

With the increased use of social media and online campaigning, there are more ways to interfere with the elections. If successful, attackers can prevent people to not go for voting. However, the security of the election has not changed much. Still, in order to change the vote tally, one needs to either hack the voting machines in the poll locations or attack the communication lines. While it may be attractive to some foreign entities to manipulate the results, the system is getting secured each day via patching the vulnerabilities.

Should voters be concerned about foreign election hacking? Why or why not?

At the very least they should be concerned. According to several sources, voter data was obtained by foreign entities. Even though they may not able to change the outcome of the election, they still have Personally Identifiable Information, which is protected by a combination of federal laws, including the Electronic Communications Privacy Act, Telephone Consumer Protection Act, Family Educational Rights and Privacy Act, etc., that is a concern of losing one's privacy.

What do you think needs to be done in future election cycles to deter foreign election hacking?

Cybersecurity standards need to be tightened. Current security assessment standards of ISO 27001, PCI DSS, FedRAMP, even the comprehensive Cloud Security Alliance Security, Trust, and Assurance Registry standards do not emphasize the importance of digital forensics in their framework. Clarifying which logs should be acquired, analyzed and reported in a forensically sound manner is crucial to protect our elections. Any evidence that is not collected by the norms of the acquisition procedures or not analyzed according to the principles of digital evidence handling will be dismissed by the court. Therefore, security standards need to have a section on the digital forensics aspect specifically regulating data/log storage and evidence handling that should be implemented by the government.

Is there anything else you would like to add?

There is still an enormous workforce need in cybersecurity. Because of the shortage of personnel, companies, government, and our elections are under more cyberattack threats than yesterday. Therefore, not only do we need to increase the number of security experts, but also move toward more artificial intelligence solutions.
By Hannah Zedaker
Born and raised in Cypress, Texas, Hannah Zedaker graduated from Sam Houston State University in 2016 with a bachelor's degree in mass communication and a minor in political science. She began as an intern with Community Impact Newspaper in 2015 and was hired upon graduation as a reporter for The Woodlands edition in May 2016. In January 2019, she was promoted to serve as the editor of the Spring/Klein edition where she covers Spring ISD and Harris County Commissioners Court, in addition to business, development and transportation news.


MOST RECENT

Texas Gov. Greg Abbott announced Dec. 2 that the Centers for Disease Control and Prevention has allotted 1.4 million doses of the COVID-19 vaccines to the state of Texas. (Courtesy Adobe Stock)
First allotment of COVID-19 vaccinations expected to arrive in Texas in mid-December

About 1.4 million doses of the COVID-19 vaccines have been allotted to the state of Texas and will arrive the week of Dec. 14.

The East Montgomery County Industrial Park off Gene Campbell Road will welcome the Lowe's Distribution Center in July. (Courtesy East Montgomery County Improvement District)
Lowe's to bring 200 jobs to Montgomery County and more Houston-area news

Read the latest Houston-area business and community news.

The letter came a week after Longoria was virtually sworn into the office by Harris County Judge Lina Hidalgo on Nov. 18. (Screenshot via Zoom)
Harris County scrambles to make creation of Elections Administrator Office lawful after Attorney General's letter identifies deficiencies

Harris County is working to make right the appointment of Isabel Longoria as the county's first-ever elections administrator after County Attorney Vince Ryan received a letter Nov. 25 from Texas Attorney General Ken Paxton stating that the county did not follow the proper appointment process.

Gwen Sims first joined Harris County Public Health in 1997. (Courtesy Harris County Public Health)
Deputy Director Gwen Sims appointed interim executive director of Harris County Public Health

Harris County Commissioners Court unanimously appointed Gwen Sims to serve as the interim executive director of Harris County Public Health in anticipation of Executive Director Umair Shah's departure Dec. 18.

Hewlett Packard Enterprise
Hewlett Packard Enterprise to relocate headquarters from Silicon Valley to Springwoods Village

Hewlett Packard Enterprise announced Dec. 1 plans to relocate its headquarters from San Jose, California to a brand new campus in the Greater Houston area, which is under construction in CityPlace at Springwoods Village.

CCEMS provides emergency medical services for approximately 177 square miles of North Harris County. (Courtesy Cypress Creek EMS)
Judge rules Harris County Emergency Services District No. 11 can no longer withhold payments from Cypress Creek EMS

The ESD No. 11 board voted to terminate its contract with CCEMS on Sept. 3 after a long history of disagreements over the two entities’ 16-year relationship.

Klein ISD is seeking community input on the calendar for the 2021-22 school year. (Community Impact Newspaper staff)
Klein ISD seeks community input on 2021-22 calendar

Option A has the first day of school Aug. 18 and the last day of school May 27, before Memorial Day. Option B has the first day of school Aug. 23 and the last day of school on June 2, after Memorial Day.

To support this initiative, community members are encouraged to visit NAM's Blessing Tree, located at 15555 Kuykendahl Road, Houston, where they can choose a child's name and shop specifically for that child. (Courtesy Northwest Assistance Ministries)
Northwest Assistance Ministries in need of donations to support biggest Season of Blessings campaign in nonprofit's history

Northwest Assistance Ministries is in need of toys, food and monetary donations to provide meals to more than 1,700 families and toys to more than 5,300 children this holiday season. By comparison, the nonprofit provided meals for 994 families and toys for 1,773 children in 2019.

The Texas Higher Education Coordinating Board has launched a campaign to address declining college enrollment numbers across the state since the pandemic started. (Courtesy Pexels)
Texas Higher Education Coordinating Board launches campaign to boost college enrollment

The decline in college enrollment across the state of Texas has prompted several agencies to partner up and create online resources for students and counselors.

The full-service, acute-care hospital first opened in December 2000. (Courtesy Houston Methodist Willowbrook Hospital)
Houston Methodist Willowbrook Hospital marks 20 years this December

The full-service, acute-care hospital first opened in December 2000.

The 24-hour hospital boasts the latest in diagnostic and surgical expertise, including health care, women's health and orthopedics. (Courtesy CHI St. Luke's Health The Vintage Hospital)
CHI St. Luke's Health The Vintage Hospital to celebrate 10 years in Northwest Houston on Dec. 10

The 24-hour hospital boasts the latest in diagnostic and surgical expertise, including health care, women's health and orthopedics.

Nearly 750 cases of COVID-19 were confirmed in Cy-Fair ISD from Sept. 8-Nov. 29. (Courtesy Adobe Stock)
Cy-Fair ISD reports 170 COVID-19 cases among students, staff Nov. 16-29

Most of these cases came the week leading up to Thanksgiving break from Nov. 16-22—only 38 cases were confirmed over the weeklong break when campuses were closed Nov. 23-29, according to district data.