
Attack Vector 10: Foreign Interference
Foreign Remote Access
The Foreign Remote Access subtopic addresses technical pathways by which foreign or remote actors could interact with, monitor, or manipulate U.S. election systems over networks during the 2020 cycle. Remote access refers to any network connectivity—whether direct internet, VPN, or wireless—that allows external control of voting systems, which is prohibited under VVSG Principle 10 and most state laws requiring “air‑gapped” operations. Certified systems must be demonstrably isolated from networks during elections, with no remote login capabilities enabled and full logs of any exceptions; even “read‑only” remote monitoring can create risks if credentials or pathways are compromised.
The core question here is not only whether a specific foreign actor is proven to have changed votes, but whether the remote‑access surface that would make such interference possible existed, was used, and was later shielded from scrutiny.
