Category Overview

Software — Election Security Glossary

39 election security terms in the Software category, with definitions sourced from NIST, CISA, EAC, and 30+ authoritative documents.

Browse all 39 terms in Software

Firmware

Computer programs and data stored in hardware - typically in read-only memory (ROM) or programmable read-only memory (PROM) - such that the programs and data cannot be dynamically…

Low consensus8 sources

Software

Computer programs (which are stored in and executed by computer hardware) and associated data (which also is stored in the hardware) that may be dynamically written or modified…

Medium consensus8 sources

Source Code

"The specific language a programmer uses to program the electronic equipment or vote tabulating system.

Medium consensus6 sources

Black Box Testing

See basic testing. Source: NIST SP 800-53A Rev 1.

Medium consensus4 sources

Open Source

Computer software with its source code (human readable code) made available with a license in which the copyright holder provides the rights to study, change, and distribute the…

Medium consensus4 sources

Third Party Logic

Software, firmware, or hardwired logic that is neither application logic nor COTS.

High consensus4 sources

Algorithm

Source: FIPS PUB 140-2 (adapted).

Medium consensus3 sources

Commercial Off The Shelf

Software that is commercially available and not made by the vendor of an voting system, therefore not under the control of that vendor.

Medium consensus3 sources

Commercial Off The Shelf (cots)

A software and/or hardware product that is commercially ready-made and available for sale, lease, or license to the general public.

Medium consensus3 sources

Logical Correctness

Condition signifying that, for a given input, a computer program will satisfy the program specification and produce the required output.

High consensus3 sources

Patch

A software component that, when installed, directly modifies files or device settings related to a different software component without changing the version number or release…

Medium consensus3 sources

Sandboxing

A restricted, controlled execution environment that prevents potentially malicious software, such as mobile code, from accessing any system resources except those for which the…

Low consensus3 sources

By ESG Editorial Team · Drawing on NIST, VVSG, IEEE, and 25+ sources on voting system software and election IT

Election software is the code that runs voter registration systems, vote-capture devices, tabulation engines, results-reporting portals, and the back-office tools election administrators use every day. It is the invisible layer of election administration: rarely seen by voters, but on which every outcome ultimately depends.

Why this category matters for election security is that software defects, vulnerabilities, and deliberate tampering can all produce incorrect results without leaving obvious traces. A bug in vote-counting code might miscount by a small percentage and never be caught. A deliberately introduced backdoor might activate only under specific conditions. Defending against these risks requires a combination of secure development practices, code review, independent testing, and post-deployment monitoring.

The federal Voluntary Voting System Guidelines establish requirements for the software embedded in voting systems. State-level testing, when it exists, can add further requirements. But most election software is not in voting machines at all. It is in the voter registration database, the office computer, the county website, and the back-end reporting system. Each of these has its own update cycle, its own threat model, and its own security posture.

The terminology in this category covers both the specific software concerns of voting systems and the broader software security vocabulary that election offices must adopt. The concepts here are drawn from software engineering, cybersecurity, and election administration.

How These Terms Relate

These concepts together describe the role of software in election administration. Election software is increasingly the central nervous system of the process: it manages who is on the rolls, what is on the ballot, how votes are counted, and how results are reported. The terminology here covers both the specific concerns of voting systems and the broader software security vocabulary. The unifying theme is that software is a tool that must be designed, built, tested, deployed, and maintained with the same rigor that we apply to any other critical infrastructure.

Related categories

Can't find the right category?

Search the full glossary, or browse every term alphabetically instead.