Nowadays, with the electronic voting systems, you don't know what even looks suspicious if you're an elections official. You need people who understand software and software security to understand what the risks are.

Software is not static -- it is constantly changing. You can't just measure the executable; you need to measure the vendor.

The first time a CIO goes to a site such as Hacker Defender, it's a big wake-up call. But if you're not aware that these groups exist, it's hard to defend against them.

We want to make sure the methodologies we come up with have representation from all cross-sections.

Ion is one of the few to ask the questions. Like, what is this thing actually doing to my vote? How is it processing my vote?