Explore the vulnerabilities of smart meters in this Black Hat USA 2012 conference talk. Delve into the techniques criminals use to gather information from smart meters, including memory acquisition and hardware bus sniffing. Learn about authentication credential acquisition and a method for interacting with a meter's IR port without vendor-specific software. Discover the components and interactions of smart meter systems, understand the ANSI C12 communication protocol, and examine packet basics. Gain insights into data eavesdropping, hardware client functionality, and the unique characteristics of ANSI Type 2 Optical Ports. Investigate the OptiGuard Smart Meter Assessment Toolkit and its capabilities. Explore potential mitigations for physical and data-in-motion vulnerabilities. This talk, originally withheld from ShmooCon 2012 due to vendor and utility concerns, provides a comprehensive look into smart meter security issues and potential solutions.
Overview
Syllabus
Intro
Cutaway and InGuardians
Smart Meter Research Findings
Danger Electrocution
Permission-based Research/Penetration Testing
What Criminals Can Attack
Criminal Interest
Aggregator On Poletop
Components and Interaction
Dumping Memory
Memory Layout Logic
Data Eavesdropping - Step Oni
ANSI C12 Communication Protocol
Logic Analyzer - Async Serial
C12.18 Packet Basics
C12.18 Protocol Basics
CSV Parser Functionality
Advanced Persistent Tether
Hardware Client Functionality
Wink! Wink! Wink! Wink!
Lean In For A Closer Look
ANSI Type 2 Optical Port: Not Your Typical Infra-red Port
Open Source Optical Probe?
What Do We Need To Do This?
OptiGuard A Smart Meter Assessment Toolkit
OptiGuard Menu
Using The Eye Chart
Mitigations - General (2)
Mitigations - Physical
Mitigations - Data In Motion
OptiGuard Offspring?
Vendor Participation
Taught by
Black Hat
