"Why wouldn't someone think of democracy as a target?": Security practices & challenges of people involved with U.S. political campaigns

Authors: 

Sunny Consolvo, Patrick Gage Kelley, Tara Matthews, Kurt Thomas, Lee Dunn, and Elie Bursztein, Google

Distinguished Paper Award Winner

Abstract: 

People who are involved with political campaigns face increased digital security threats from well-funded, sophisticated attackers, especially nation-states. Improving political campaign security is a vital part of protecting democracy. To identify campaign security issues, we conducted qualitative research with 28 participants across the U.S. political spectrum to understand the digital security practices, challenges, and perceptions of people involved in campaigns. A main, overarching finding is that a unique combination of threats, constraints, and work culture lead people involved with political campaigns to use technologies from across platforms and domains in ways that leave them—and democracy—vulnerable to security attacks. Sensitive data was kept in a plethora of personal and work accounts, with ad hoc adoption of strong passwords, two-factor authentication, encryption, and access controls. No individual company, committee, organization, campaign, or academic institution can solve the identified problems on their own. To this end, we provide an initial understanding of this complex problem space and recommendations for how a diverse group of experts can begin working together to improve security for political campaigns.

Open Access Media

USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.

BibTeX
@inproceedings {274566,
author = {Sunny Consolvo and Patrick Gage Kelley and Tara Matthews and Kurt Thomas and Lee Dunn and Elie Bursztein},
title = {"Why wouldn{\textquoteright}t someone think of democracy as a target?": Security practices \& challenges of people involved with U.S. political campaigns},
booktitle = {30th {USENIX} Security Symposium ({USENIX} Security 21)},
year = {2021},
isbn = {978-1-939133-24-3},
pages = {1181--1198},
url = {https://www.usenix.org/conference/usenixsecurity21/presentation/consolvo},
publisher = {{USENIX} Association},
month = aug,
}

Presentation Video