Many modern devices, including critical infrastructures, depend on the reliable operation of electrical power conversion systems. The small size and versatility of switched-mode power converters has resulted in their widespread adoption. Whereas transformer-based systems passively convert voltage, switched-mode converters feature an actively regulated feedback loop, which relies on accurate sensor measurements. Previous academic work has shown that many types of sensors are vulnerable to Intentional Electromagnetic Interference (IEMI) attacks, and it has been postulated that power converters, too, are affected. In this paper, we present the first detailed study on switched-mode power converters by targeting their voltage and current sensors through IEMI attacks. We present a theoretical framework for evaluating IEMI attacks against feedback-based power supplies in the general case. We experimentally validate our theoretical predictions by analyzing multiple AC-DC and DC-DC converters, automotive grade current sensors, and dedicated battery chargers, and demonstrate the systematic vulnerability of all examined categories under real-world conditions. Finally, we demonstrate that sensor attacks on power converters can cause permanent damage to Li-Ion batteries during the charging process.
翻译:众多现代设备,包括关键基础设施,均依赖于电力转换系统的可靠运行。开关式电源转换器因其体积小、多功能性而被广泛采用。与基于变压器的被动电压转换系统不同,开关式转换器配备有主动调节的反馈回路,该回路依赖于精确的传感器测量值。已有学术研究表明,多种类型的传感器易受有意电磁干扰(IEMI)攻击,且已有推测认为电力转换器同样会受到此类影响。本文首次针对开关式电源转换器,通过对其电压和电流传感器实施IEMI攻击展开详细研究。我们提出了一个理论框架,用于评估在一般情况下基于反馈的电源系统所面临的IEMI攻击。通过分析多种交流-直流(AC-DC)转换器、直流-直流(DC-DC)转换器、车规级电流传感器以及专用电池充电器,我们实验验证了理论预测,并证明了在实际条件下所有被检类别均存在系统性漏洞。最后,我们证明,对电力转换器的传感器攻击可在充电过程中对锂离子电池造成永久性损坏。