In this series of case studies, students learn to identify, assess, and control the risks of distributed denial of service (DDoS) attacks in a real-world situation. PopVote was the electronic voting system used by the Public Opinion Programme (POP) at the University of Hong Kong. This case consists of cases A, B, and C. Case A gives the background on POP and PopVote. It describes the development history of PopVote, including past voting events, past cyber-attacks, and the evolution of its IT security infrastructure. Students are asked how to identify and assess potential security risks and how to prepare PopVote for an upcoming high-visibility voting event.

In this series of case studies, students learn to identify, assess, and control the risks of distributed denial of service (DDoS) attacks in a real-world situation. PopVote was the electronic voting system used by the Public Opinion Programme (POP) at the University of Hong Kong. This case study consists of cases A, B, and C. Case B sets the scene for risk control in information security management. To improve cloud-based security, POP outsourced the system security to Amazon Web Services (AWS), CloudFlare, and UDomain. During the mock and preregistration period of the voting event, the scale of DDoS attacks forced AWS and UDomain to make an unusual move and withdraw their services. CloudFlare also warned that it might suspend its service if there was another wave of cyber-attacks. The POP team had to decide immediately what they should do to control the risks.

In this series of case studies, students learn to identify, assess, and control the risks of distributed denial of service (DDoS) attacks in a real-world situation. PopVote was the electronic voting system used by the Public Opinion Programme (POP) at the University of Hong Kong. This case study consists of cases A, B, and C. Case C describes what actually happened to PopVote after AWS and UDomain, security system providers, withdrew their services.