Smart meters are of the basic elements in the so-called Smart Grid. These devices, connected to the Internet, keep bidirectional communication with other devices in the Smart Grid structure to allow remote readings and maintenance. As any other device connected to a network, smart meters become vulnerable to attacks with different purposes, like stealing data or altering readings. Nowadays, it is becoming more and more popular to buy and plug-and-play smart meters, additionally to those installed by the energy providers, to directly monitor the energy consumption at home. This option inherently entails security risks that are under the responsibility of householders. In this paper, we focus on an open solution based on Smartpi 2.0 devices with two purposes. On the one hand, we propose a network configuration and different data flows to exchange data (energy readings) in the home. These flows are designed to support collaborative among the devices in order to prevent external attacks and attempts of corrupting the data. On the other hand, we check the vulnerability by performing two kind of attacks (denial of service and stealing and changing data by using a malware). We conclude that, as expected, these devices are vulnerable to these attacks, but we provide mechanisms to detect both of them and to solve, by applying cooperation techniques
翻译:智能电表是所谓智能电网的基本构成要素。这类设备通过互联网与智能电网架构中的其他设备保持双向通信,实现远程抄表与维护。与其他联网设备相同,智能电表容易遭受具有不同目的的攻击,例如窃取数据或篡改读数。如今,除能源供应商安装的智能电表外,自行购买即插即用型智能电表以直接监测家庭能耗的行为日趋普遍。这种选择必然带来由用户承担的安全风险。本文聚焦基于Smartpi 2.0设备的开放式解决方案,实现双重目标:一方面,提出网络配置方案及数据流规范,用于实现家庭内部能源读数的数据交换。该数据流设计支持设备间的协同防御机制,可抵御外部攻击与数据篡改尝试;另一方面,通过实施拒绝服务攻击与利用恶意软件窃取篡改数据两种攻击方式检测系统脆弱性。研究结论表明,这些设备确实存在预期中的安全漏洞,但本文提供了基于协同技术的攻击检测与修复双重机制。