Skip to main content    

An official website of the United States government

Here’s how you know

**Official websites use .gov**              A **.gov** website belongs to an official government organization in the United States.            

**Secure .gov websites use HTTPS**              A **lock** (  LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.            

https://www.nist.gov/itl/voting/test-assertions-vvsg-10-section-775-august-2015

            -  Topics  -  All Topics 
-  Advanced communications 
-  Artificial intelligence 
-  Bioscience 
-  Buildings and construction 
-  Chemistry 
-  Climate 
-  Cybersecurity 
-  Electronics 
-  Energy 
-  Environment 
-  Fire 
-  Forensic science 
-  Health 
-  Information technology 
-  Infrastructure 
-  Manufacturing 
-  Materials 
-  Mathematics and statistics 
-  Metrology 
-  Nanotechnology 
-  Neutron research 
-  Performance excellence 
-  Physics 
-  Public safety 
-  Resilience 
-  Standards 
-  Transportation 
 
            -  Publications 
            -  Labs & Major Programs  -  Laboratories    -  Communications Technology Laboratory 
  -  Engineering Laboratory 
  -  Information Technology Laboratory 
  -  Material Measurement Laboratory 
  -  Physical Measurement Laboratory 
-  User Facilities    -  NIST Center for Neutron Research 
  -  CNST NanoFab 
-  Research Test Beds 
-  Research Projects 
-  Tools & Instruments 
-  Major Programs    -  Baldrige Performance Excellence Program 
  -  CHIPS for America Initiative 
  -  Manufacturing Extension Partnership (MEP) 
  -  Office of Advanced Manufacturing 
  -  Special Programs Office 
  -  Technology Partnerships Office 
 
            -  Services & Resources  -  Standards and Measurements    -  Calibration Services 
  -  Laboratory Accreditation (NVLAP) 
  -  Quality System 
  -  Standard Reference Materials (SRMs) 
  -  Standards.gov 
  -  Time Services 
  -  Office of Weights and Measures 
-  Software 
-  Data    -  Chemistry WebBook 
  -  National Vulnerability Database 
  -  Physical Reference Data 
  -  Standard Reference Data (SRD) 
-  Storefront 
-  License & Patents 
-  Computer Security Resource Center (CSRC) 
-  NIST Research Library 
 
            -  News & Events  -  News 
-  Events 
-  Blogs 
-  Feature Stories 
-  Awards 
-  Video Gallery 
-  Image Gallery 
-  Media Contacts 
 
            -  About NIST  -  About Us    -  Leadership 
  -  Organization Structure 
  -  Budget & Planning 
-  Contact Us 
-  Visit 
-  Careers    -  Student programs 
-  Work with NIST 
-  History    -  NIST Digital Archives 
  -  NIST Museum 
  -  NIST and the Nobel 
-  Educational Resources 
 

Information Technology Laboratory

## Voting

-  Research and Projects  Expand or Collapse    -  VVSG 
  -  TGDC 
  -  Test Labs 
  -  Accessibility and Human Factors 
  -  Election Security 
  -  Interoperability 
-  Events 
-  About Us 
-  History of Voting  Expand or Collapse    -  Archived Research Papers 
-  Contact Us 

# Test Assertions for VVSG 1.0 Section 7.7.5, August 2015

## Share

Facebook

Linkedin

Twitter

Email

**Requirement 7.7.5**

**VVSG 1.0 Requirement 7.7.5:**

Physical security measures to prevent access to a voting system are not possible when using a wireless communications interface because there is no discrete physical communications path that can be secured.

a. The security requirements in Subsection 2.1.1 shall be applicable to systems with wireless communications.

b. The accuracy requirements in Subsection 2.1.2 shall be applicable to systems with wireless communications.

c. The use of wireless communications that may cause impact to the system accuracy through electromagnetic stresses is prohibited.

d. The error recovery requirements in Subsection 2.1.3 shall be applicable to systems with wireless communications.

e. All wireless communications actions shall be logged.

i.           The log shall contain at least the following entries: times when the wireless is activated and deactivated, services accessed, identification of device to which data was transmitted to or received from, identification of authorized user, and successful and unsuccessful attempts to access wireless communications or service.

**Discussion:** Other information such as the number of frames or packets transmitted or received at various logical layers may be useful, but is dependent on the wireless technology used.

f. Device authentication shall occur before any access to, or services from, the voting system are granted through wireless communications.

**Discussion:** Authentication is an important element to protect the security of wireless communications. Authentication verifies the identity and legitimacy of users, devices, and services.

a. User authentication shall be at least level 2 as per NIST Special Publication 800-63 Version 1.0.1, Electronic Authentication Guideline.

**Test Assertions**

**TA775a-1:** IF a Voting System contains wireless communications capabilities THEN it SHALL conform to VVSG 1.0, Section 2.1.1, including subsections a through g.

**TA775b-1:** IF a Voting System contains wireless communications capabilities THEN it SHALL conform to VVSG 1.0, Subsection 2.1.2, including subsections a through f.

**TA775c-1:** IF it is possible for a wireless communication to cause impact to the system accuracy through electromagnetic stresses THEN voting systems SHALL NOT use that wireless communication.

**TA775d-1:** IF a Voting System contains wireless communications capabilities THEN it SHALL conform to VVSG 1.0, Subsection 2.1.3, including subsections a through c.

**TA775e-1:** IF a Voting System contains wireless communications capabilities THEN all wireless communications actions SHALL be logged.

**TA775ei-1:** The log SHALL contain, but not be limited to, the following entries:

·  times when the wireless is activated and deactivated

·  services accessed

·  identification of device to which data was transmitted to or device data was received from

·  identification of authorized user

·  successful attempts to access wireless communications or service

·  unsuccessful attempts to access wireless communications or service.

**TA775ei-2:** The log MAY contain the following entries:

·  the number of frames or packets transmitted at various logical layers

·  the number of frames or packets received at various logical layers

**TA775f-1:** IF a Voting System contains wireless communications capabilities THEN device authentication SHALL occur before any access to the voting system is granted through wireless communications.

**TA775f-2:** IF a Voting System contains wireless communications capabilities THEN device authentication SHALL occur before any services from the voting system are granted through wireless communications.

**TA775fi-1:**User authentication SHALL be at least level 2 as per NIST Special Publication 800-63-2, Electronic Authentication Guideline.

**TA775fi-1-1:** The password MAY be a randomly generated string consisting of 6 or more digits, a user generated string consisting of 8 or more characters chosen from an alphabet of 90 or more characters, or a secret with equivalent entropy.

**TA775fi-1-2:**The voting system SHALL implement dictionary or composition rules to constrain user generated passwords.

Information technologyVoting systems

### HEADQUARTERS

301-975-2000

Webmaster | Contact Us | Our Other Offices

TwitterFacebookLinkedInInstagramYouTubeGiphyRSS FeedMailing List

Feedback

            -  Site Privacy 
            -  Accessibility 
            -  Privacy Program 
            -  Copyrights 
            -  Vulnerability Disclosure 
            -  No Fear Act Policy 
            -  FOIA 
            -  Environmental Policy 
            -  Scientific Integrity 
            -  Information Quality Standards 
            -  Commerce.gov 
            -  Science.gov 
            -  USA.gov 
            -  Vote.gov