Analysis: Warren and Booker most cyber-aware 2020 candidates

Analysis: Warren and Booker most cyber-aware 2020 candidates
© Getty Images

Democratic Sens. Elizabeth WarrenElizabeth Ann WarrenDemocrats worry they don't have right candidate to beat Trump Overnight Energy: BLM staff face choice of relocation or resignation as agency moves | Trump says he's 'very much into climate' | EPA rule would expand limits on scientific studies Krystal Ball credits Gabbard's upswing in 2020 race to 'feckless' Democratic establishment MORE (Mass.) and Cory BookerCory Anthony BookerOutsider candidates outpoll insider candidates The Hill's Campaign Report: Bloomberg looks to upend Democratic race Poll: Biden support hits record low of 26 percent MORE (N.J.) are the 2020 presidential candidates with the highest level of cybersecurity awareness, according to an industry report released on Monday, with former tech entrepreneur Andrew YangAndrew YangOutsider candidates outpoll insider candidates Is Andrew Yang's pivot working? New Quinnipiac poll finds Biden leading in New Hampshire MORE ranking last. 

Both Warren and Booker received an A-, while Yang scored a D+. Sen. Amy KlobucharAmy Jean KlobucharGoogle sparks new privacy fears over health care data Krystal Ball credits Gabbard's upswing in 2020 race to 'feckless' Democratic establishment Outsider candidates outpoll insider candidates MORE (D-Minn.) and former Vice President Joe BidenJoe BidenDemocrats worry they don't have right candidate to beat Trump Trump threatening to fire Mulvaney: report Giuliani pens op-ed slamming 'unprecedented' impeachment inquiry MORE also scored badly, with Klobuchar receiving a C, and Biden a C-. 

Other top scorers included Sen. Bernie SandersBernie SandersDemocrats worry they don't have right candidate to beat Trump Overnight Health Care: Top health official defends contract payments to Trump allies | Vaping advocates confident Trump will turn from flavor ban | Sanders gets endorsement from nurses union Krystal Ball credits Gabbard's upswing in 2020 race to 'feckless' Democratic establishment MORE (I-Vt.), with a B+, and President TrumpDonald John TrumpTrump faces high stakes in meeting with Erdoğan amid impeachment drama Democrats worry they don't have right candidate to beat Trump Trump threatening to fire Mulvaney: report MORE, who received a B grade. 

ADVERTISEMENT

The findings come from a “report card” compiled by website security group SiteLock on 12 of the top 2020 presidential candidates. SiteLock evaluated cyber awareness based on how integrated cybersecurity was in a candidate’s platform, how often the candidate discussed it, and the actions taken in relation to cybersecurity by the candidate.

Some of the factors SiteLock used to make these evaluations were whether a candidate had ever been involved in a data breach, whether campaign email addresses had been found on the dark web, if the candidate had publicly supported legislation on cybersecurity issues and whether the candidate had a published privacy policy on their campaign website. 

SiteLock also scanned candidate websites to ascertain how at-risk they were to cyberattacks, finding that 58 percent of the candidates’ sites use out-of-date software.

“Technically, anything short of perfect cybersecurity awareness practices should be viewed as a security flaw because it only takes a single vulnerability to fall victim to a bad actor,” SiteLock wrote in a blog post announcing the report card findings. “The fact that not one candidate can be credited with a perfect score proves that cybersecurity awareness is an overlooked issue.”

SiteLock noted that Warren “rose to the top” of the awareness ranking in large part due to her “advocacy for stronger cybersecurity practices,” particularly in regards to securing elections. 

Warren described U.S. elections in a blog post for Medium in June as “less secure than your Amazon account,” and laid out a plan for overhauling the U.S. voting system in order to heighten security. 

Booker also included strengthening election security as part of his national security platform, vowing to “protect our democracy from foreign interference” if elected. Almost all of the other candidates scored by SiteLock have either prioritized or discussed the need to shore up election security.

SiteLock wrote that Trump would have received a higher grade had Trump International Hotels not been involved in three data breaches between 2016 and 2017 and if cybersecurity was part of his 2020 platform. Trump’s reelection website does list steps taken by the Trump administration to combat cyber threats, including providing cybersecurity assistance to states during elections.

ADVERTISEMENT

The remaining candidates scored by SiteLock included former Housing and Urban Development Secretary Julián Castro and former Rep. Beto O’Rourke (D-Texas), both of whom received a B; Sen. Kamala HarrisKamala Devi HarrisOutsider candidates outpoll insider candidates Poll: Buttigieg leads Democratic field in Iowa Press: Another billionaire need not apply MORE (D-Calif.), who received a B-; and former Massachusetts Gov. Bill WeldWilliam (Bill) WeldThe Hill's 12:30 Report: Trump demands Bidens testify Pence files paperwork for Trump to be on New Hampshire ballot Trump primary challengers to be excluded from Minnesota ballot MORE (R) and South Bend, Ind., Mayor Pete ButtigiegPeter (Pete) Paul ButtigiegDemocrats worry they don't have right candidate to beat Trump Saagar Enjeti rips Buttigieg for praising Obama after misquote Krystal Ball credits Gabbard's upswing in 2020 race to 'feckless' Democratic establishment MORE, both of whom received a C+. 

SiteLock wrote that “none of the candidates we audited have mastered a fully secure online presence alongside a strong cybersecurity platform as a candidate, though a few came close.”

The company noted that Harris’s score had been boosted due to her support of cybersecurity legislation while serving in the Senate and as the California attorney general. 

Harris’s campaign was also the only one of those scored to use a “CAPTCHA” on an email form, which cuts down on threats from bot accounts by requiring the sender to verify they are human by checking a box and typing out text. 

SiteLock wrote that it notified each campaign of its findings prior to the report card’s release and said that while it received “minimal” feedback, some unnamed campaigns expressed the belief that not having CAPTCHA sign up forms did not present a major cybersecurity risk.

SiteLock noted that while a candidate scoring low on cybersecurity awareness does not mean their campaign is “doomed” on the issue, it is something that the American public is increasingly zeroing in on.

“As our world becomes more connected, the need for a leader who will champion the issue only becomes more urgent,” SiteLock wrote. “Keep a close eye on your 2020 candidates to see how they rise to the challenge.”