Cybersecurity Vulnerabilities in Advanced Electric Metering Devices

• Bruno M. Santos UFF
• Wesley H. Leite Faculdade Vincit
• Raphael C. S. Machado UFF

DOI: https://doi.org/10.5753/sbseg.2024.240614

Abstract

In this work, we assess the safety of Advanced Metering Devices for electric energy, critical elements in Advanced Metering Infrastructures (AMI). These devices, essential in energy distribution networks, record and transmit energy consumption data. We analyzed commercially available devices, addressing aspects from architectural to software security and their configurations. The vulnerabilities identified were classified according to the taxonomy of the Common Weakness Enumeration (CWE) and measured based on the methodology of the Common Vulnerability Scoring System (CVSS) 3.1. The analyses revealed high risks, especially in access and identity management.

References

GHOSAL, Amrita; CONTI, M. Key Management Systems for Smart Grid Advanced Metering Infrastructure, IEEE Communications Surveys & Tutorials,2019. Disponível em: DOI: 10.1109/COMST.2019.2907650. Acesso em: Set. 2023.

SUN, Chih-Che; et Al.. Intrusion Detection for Cybersecurity of Smart Meters. IEEE Transactions on Smart Grid, 2020. Disponível em: DOI: 10.1109/TSG.2020.3010230. Acesso em: 07 Set. 2023

FOREMAN, J. C.; GURUGUBELLI, D. Cyber attack surface analysis of advanced metering infrastructure. arXiv preprint arXiv:1607.04811, 2016. Disponível em: [link]. Acesso em: 29 outubro 2023.

CHINNOW, J.; BSUFKA, K.; SCHMIDT, A. D.; BYE, R.; CAMTEPE, A.; ALBAYRAK, S. A simulation framework for smart meter security evaluation. , SMFG, 2011. Disponível em: DOI: 10.1109/SMFG.2011.6125758. Acesso em: 29 Out. 2023.

YI, P.; ZHU, T.; ZHANG, Q.; WU, Y.; LI, J. A denial-of-service attack in advanced metering infrastructure network. ICC, 2014. Disponível em: DOI: 10.1109/ICC.2014.6883456. Acesso em: 29 Out. 2023.

TWENEBOAH-KODUAH, S.; TSETSE, A.K.; AZASOO, J.; ENDICOTTPOPOVSKY, B. Evaluation of Cybersecurity Threats on Smart Metering System. In: Latifi, S. (eds) Information Technology, vol 558. Springer, Cham. Disponível em: DOI: 10.1007/978-3-319-54978-1_28. Acesso em: 29 Out. 2023.

KHATTAK, A. M.; KHANJI, S. I.; KHAN, W. A. Smart meter security: Vulnerabilities, threat impacts, and countermeasures. IMCOM, 2019. Disponível em: [link]. Acesso em: 29 Out. 2023.