Security Risks of an Advanced Metering Infrastructure

Transcription

1 Security Risks of an Advanced Metering Infrastructure Gabriel d Eustachio Senior Security Consultant, CSC 19 May 2009 AusCERT2009 Security Risks of an Advanced Metering Infrastructure

2 AusCERT2009 Security Risks of an Advanced Metering Infrastructure Overview of the National Electricity Market

3 Overview of the National Electricity Market Market Structure The electricity market is divided into 4 types of providers Generators Transmitters Distributors Retailers 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 3

4 Overview of the National Electricity Market Variable Pricing Pricing varies during the day, with even broader swings over the year Different types of generators Consumer does not see price variation Demand vs. Spot Price $2, $2, $1, $1, $ $- -$ $1, TOTALDEMAND Regional Reference Price 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 4

5 AusCERT2009 Security Risks of an Advanced Metering Infrastructure Advantages of Advanced Metering

6 Advantages of Advanced Metering Infrastructure Enables Advanced Functionality Variable pricing Remote reading Remote administration Advanced ( smart ) use management 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 6

7 Advantages of Advanced Metering Infrastructure Example of Time Dependant Pricing Dominion Power - Pilot program in the USA Standard Pricing Winter TOU Price First 800 kwh /kwh Over 800 kwh /kwh Critical Peak Pricing Spring/Fall TOU Price Peak /kwh Off-peak /kwh Summer TOU Price Summer TOU First 800 kwh /kwh Peak Over 800 kwh /kwh Off-peak Extreme Peak Price /kwh /kwh 49 /kwh 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 7

8 Architecture and Functionality AusCERT2009 Security Risks of an Advanced Metering Infrastructure

9 Architecture and Functionality AMI Components Definitions Home Area Network (HAN) the network connecting customer owned devices within the customer premises Meter Measures electricity consumption, manages HAN, provides connectivity to the AMI network LAN/WAN (Transport) connects meters to the management network. Connection can be local (LAN), long distance (WAN) or a combination of technologies Network Management System (NMS) Back end management systems and databases. Manages devices in the AMI, collects meter read data, monitors the AMI, and alerts on incidents or outages 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 9

10 Architecture and Functionality AMI Components Basic Architecture HAN Meter Transport (LAN/WAN) NMS 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 10

11 AusCERT2009 Security Risks of an Advanced Metering Infrastructure Inherent Security Risks

12 Inherent Security Risks Potential Threat Vectors Unethical customers Snoopers Attackers Trusted users 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 12

13 Inherent Security Risks Meter Technology Purpose-built systems Components or all-in-one Three Primary Functions Local Communications (HAN) Network Communications (LAN) Measurement and recording of electricity usage Other functions Local data storage Allow local read Event monitoring and alerting Remote management Remote connect/disconnect 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 13

14 Inherent Security Risks Meter Key Risks and Controls Effectiveness of Controls Acceptance testing Physical Tampering Advanced detection Real-time alerting Falsified data Authenticated devices Data signing Check-summed calibration data Encrypted storage 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 14

15 Inherent Security Risks Home Area Network - Technology Connectivity (ZigBee SE) Connects to user-supplied devices Enables advanced use management Enables remote meter reading 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 15

16 Inherent Security Risks Home Area Network Key Risks and Controls Authentication of devices OOB device authentication Confidentiality of data Encryption Authenticity of HAN device data Cryptographic signature Promotion of rights Separation at HAN/meter interface Limited functionality of HAN devices and traffic HAN LAN Metrology 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 16

17 Inherent Security Risks Transport Technologies Technologies Wireless mesh networks PAN-style networks (ZigBee, Bluetooth) Backhaul (BPL, GPRS) Transport LAN WAN NMS 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 17

18 Inherent Security Risks Transport Key Risks and Controls Transmission (Interruption, Corruption, Interception) Encryption Authentication Tampering Tamper alerting Secure data storage Transport 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 18

19 Inherent Security Risks NMS Technology and Vulnerabilities Technology Data collection/processing Network management Massive amounts of data Vulnerabilities Classical security threats (virus, worms, misconfiguration, poor patching) Malicious internal users Availability NMS 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 19

20 Inherent Security Risks NMS Controls Classic industry better practices Patch/anti-virus management Configuration standards User management Logging/Alerting/Incident Response Archiving of records Periodic review of activity Strong BCP/DR program Development Criteria Security standards Acceptance testing Periodic review NMS 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 20

21 AusCERT2009 Security Risks of an Advanced Metering Infrastructure Summary

22 Conclusions AMI Overview Can have a significant impact on electricity usage Creates economic incentive for smart electricity use Can significantly reduce consumer costs and infrastructure requirements Forms a key part of critical infrastructure Impact of a potential security breach is huge Equipment is likely to remain in the field, unattended, for years Normal tamper detection happens via meter-read User has unlimited access to attempt tampering 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 22

23 Conclusions AMI Key Security Risks Custom Hardware/Custom Code Thorough hardware testing Code acceptance/security testing Widespread network Encryption Authentication Device management NMS System security/maintenance User management Monitoring/logging/auditing 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 23

24 Summary AMI Security Strategy Very high inherent security risk Leverage existing security methods IT security has matured and is prepared for this challenge 7/24/2009 9:29 AM Newly Branded PowerPoint Opt 6 24

25 Security Risks of an Advanced Metering Infrastructure Gabriel d Eustachio Senior Security Consultant gdeustachio@csc.com.au aus_busdev@csc.com AusCERT2009 Security Risks of an Advanced Metering Infrastructure