Mitnick formula

Estonia can be considered one of the most developed countries in terms of cyber security. According to Global Cybersecurity Index, Estonia is in TOP-5 in the world in terms of cybersecurity. 

The Global Cybersecurity Index (GCI) is a trusted reference that measures the commitment of countries to cybersecurity at a global level – to raise awareness of the importance and different dimensions of the issue. As cybersecurity has a broad field of application, cutting across many industries and various sectors, each country’s level of development or engagement is assessed along five pillars – Legal Measures,  Technical Measures, Organizational Measures,  Capacity Development, and  Cooperation – and then aggregated into an overall score.

Estonia is the first nation in the world to implement electronic voting, which is a gigantic cybersecurity challenge - to provide both anonimity and trust, which are key elements of fair election. It has a well-developed system of ID-cards and signing the documents and identifying yourself. 

Although, there are still drawbacks in our system. It was proven many times that our electronic voting can be easily hacked.  "The Estonian system uses a security architecture that may have been adequate when the system was introduced a decade ago, but it is now dangerously out of date," said the report authored by J. Alex Halderman, assistant professor of computer science and engineering at University of Michigan, along with several security experts and Ph.D. students. "Estonia’s system places extreme trust in election servers and voters’ computers — all easy targets for a foreign power."

But the Estonian system can also be targeted with server-side attacks, an even more worrisome approach that could lead to votes being completely rigged after the fact. "The attack’s modifications would replace the results of the vote decryption process with the attacker’s preferred set of votes," said the researchers. The researchers concludes that Estonia's voting infrastructure is littered with "serious design weaknesses" and urges the company to cease e-voting until it can lock things down tighter. In 2007, Estonia suffered a huge denial-of-service that swamped its parliament, banking systems, and other organizations. Russia is believed to have been the culprit in that attack.

In conclusion, Estonian system is quickly-developing and still has room for improvement.