In many countries, including India, voters have always believed that the best way to ensure the safety of electronic voting machines is to block the access of bad people to the technology. In recent years, however, voters have become increasingly disappointed that they no longer believe in any voting system, even with the endorsement of various experts.
In order to balance transparency and security, Microsoft launched a free and open-source software development kit (SDK) named electionguard in May this year, trying to complete the end-to-end verification of the whole campaign voting process.
Microsoft's electionguard SDK can be integrated into the voting system. Its original design is to "complete the end-to-end verification of the voting process, open the voting results to a third-party organization for security verification, and facilitate voters to confirm whether their vote has played a role."
Electionguard also has a bounty and insect catching program
In view of that bugs will come out of the software, to ensure that the infallible Microsoft simply launched the electionguard Reward Project on October 18, inviting security researchers from all over the world to help find the loopholes in the SDK.
"The electionguard project invites security researchers from all over the world to work with Microsoft to protect users' rights and interests, which is part of Microsoft's commitment to protect and preserve the electoral process under its program to defend democracy." Microsoft wrote in a blog post today.
"We welcome network security personnel (full-time or part-time), fans or students from all over the world to help us find the high-risk vulnerabilities in the target area of the electionguard SDK and share them with Microsoft in a timely manner."
You can get a reward of up to $15000 from Microsoft as long as you find the vulnerability with clear and concise POC and demonstrate how to use the discovered vulnerability to achieve security impact.
Currently, the parts incorporated into the project include the electionguard API SDK, the electionguard specification and documentation, and the validation program reference implementation. In the future, Microsoft will expand the coverage of the project to attract more researchers.