E-Deceptive Campaign Practices Draft

From CFPWiki

---

Revision as of 18:10, 8 May 2008

e-Deceptive Campaign Practices 2008 Draft

You are invited to comment and provide content on this page by editing it. The goal is too publish a report in the of Fall 2008. You can participate in the discussion by editing this page. If you would like to participate in a topic mailing list on developing the report e-Deceptive Campaign Practices 2008 send a message to mail info@epic.org

Report Outline

I. Ways in which new technology may bring deceptive practices on-line

1. Use of data mining to profile and target voters and email them misinformation/ deceptive spam email
2. Compressing the timeline for launching disinformation and misinformation attacks from days to hours or minutes.
3. Setting up websites that sound official but that are fake and provide misinformation, such as sites for the Secretary of State or local election official
4. Denial of Service Attacks against legitimate sites. Also could include lapse of domain registration and hosting agreements
5. Re-routing accurate website addresses to false websites Corrupting RSS Feeds, (Pharming and Phishing attacks that misdirect voters from deceptive e-mail posing as legitimate election official communications.
6. Using â€œtypo domainsâ€ to create false websites with misinformation
7. Text messaging misinformation, and cell phone messages (GPS features)
8. Using Voice Over IP (VoIP) calls or botnet based calls to spread misinformation

II. Groups that may be targeted

1. Young people
2. Voters with obvious political leanings based on their online or offline activity
3. Not traditionally disenfranchised groups

III. Why deceptive practices online may be more difficult to trace and the perpetrators more difficult to apprehend

1. History of the Internet
2. How it Works: Physical Space v. Cyberspace
3. Communication and the Internet
4. Security Challenges

IV. Potential technological means to combat these acts

1. To target people for these attacks voter registration records are important
2. Web pages, RSS Feeds, and maybe a U-Tube Video on the threat
3. Public Awareness

V. The state of the law covering these types of acts

1. Voting laws
2. Criminal laws, e.g. cyber crime,
3. Civil liability, e.g. for providers
4. SPAM
5. Computer Crimes trespass, spyware, malicious activity

VI. Recommendations