Neighborhood watch: Security and privacy analysis of automatic meter reading systems

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2012, Pages 462-473

  Rouf, Ishtiaq ^a   Mustafa, Hossen ^a   Xu, Miao ^a   Xu, Wenyuan ^a   Miller, Rob ^b   Gruteser, Marco ^c  

^a UNIVERSITY OF SOUTH CAROLINA   (United States)

^b Applied Communication Sciences ^*  (United States)

^c RUTGERS UNIVERSITY   (United States)

Author keywords

AMR meter; Privacy; Reverse engineering; Spoofing

Indexed keywords

AUTOMATIC METER READING; ENERGY USAGE; PRIVACY RISKS; SECURITY AND PRIVACY ANALYSIS; SECURITY MEASURE; SECURITY RESEARCH; SMART METERS; SPOOFING; TECHNICAL EFFORTS; USAGE DATA; UTILITY COMPANIES; WIRELESS COMMUNICATIONS; WIRELESS LINK;

AUTOMATION; DATA PRIVACY; PUBLIC UTILITIES; REVERSE ENGINEERING; WIRELESS TELECOMMUNICATION SYSTEMS;

WATER METERS;

EID: 84869476902     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2382196.2382246     Document Type: Conference Paper

References (46)

1. "Stop smart meters." [Online]. Available: http:// stopsmartmeters.org/
2. A. Bleicher, "Privacy on the smart grid," IEEE Spectrum, October 2010.
3. N. Dallas-Fortworth, "Smart meters can be hacked: Security experts," October 2009.
4. M. Lisovich and S. Wicker, "Privacy concerns in upcoming residential and commercial demand-response systems," in 2008 Clemson University Power Systems Conference. Clemson University, 2008.
5. M. A. Lisovich, D. K. Mulligan, and S. B. Wicker, "Inferring personal information from demand-response systems," IEEE Security and Privacy, vol. 8, pp. 11-20, 2010.
6. A. Molina-Markham, P. Shenoy, K. Fu, E. Cecchet, and D. Irwin, "Private memoirs of a smart meter," in Proceedings of ACM BuildSys, November 2010.
7. P. McDaniel and S. McLaughlin, "Security and privacy challenges in the smart grid," IEEE Security and Privacy, no. 3, pp. 75-77, 2009.
8. U. Greveler, B. Justus, and D. Loehr, "Multimedia content identification through smart meter power usage profiles," in Computers, Privacy and Data Protection, 2012.
9. D. J. Solove, M. Rotenberg, and P. M. Schwartz, Privacy, Information, and Technology. Aspen Publishers, Inc, 2006.
10. S. McLaughlin, D. Podkuiko, and P. McDaniel, "Energy theft in the advanced metering infrastructure," in Proceedings of CRITIS. Springer-Verlag, 2010, pp. 176-187.
11. National Institute of Standards and Technology, "Guidelines for smart grid cyber security: Vol. 2, privacy and the smart grid," The Smart Grid Interoperability Panel, vol. NISTIR 7628, 2010.
12. U.S. Energy Information Administration, "Annual electric power industry report," 2010.
13. Comverge, "Comverge integrates AMR metering technology into the comverge IntelliSOURCE Platform," 2010.
14. H. Ali, "Debunking the battery life expectancy myth between AMI and AMR," September 2011. [Online]. Available: http://www.waterworld.com/index/ display/articledisplay/3002583591/articles/waterworld/waterutilitymanagement/ 2011/09/debunking-the-batterylife-expectancy-myth-between-ami-and-amr.html
15. A. Rial and G. Danezis, "Privacy-preserving smart metering," in Proceedings of WPES, 2011, pp. 49-60.
16. H. Khurana, M. Hadley, L. Ning, and D. Frincke, "Smart-grid security issues," IEEE Security and Privacy, vol. 8, no. 1, pp. 81-85, 2010.
17. T. D. Tamarkin, "Automatic meter reading," Public Power, vol. 50, 1992.
18. T. G. Paraskevakos, "Sensor monitoring device," United States Patent, 1972.
19. National Energy Technology Laboratory, "NETL modern grid strategy: Advanced metering infrastructure," 2008.
20. M. L. Grindahl and Q. S. Denzene, "Automatic/remote RF instrument monitoring system," United States Patent, January 1989.
21. J. McNabb, "Vulnerabilities of wireless water meter networks," February 2011. [Online]. Available: https://media.blackhat.com/bh-us-11/McNabb/ BH-US-11-McNabb-Wireless-Water-Meter-WP.pdf
22. "Ettus Research LLC," http://www.ettus.com/.
23. "Mini-circuits," http://www.minicircuits.com.
24. J. Manweiler, N. Santhapuri, S. Sen, R. Roy Choudhury, S. Nelakuditi, and K. Munagala, "Order matters: transmission reordering in wireless networks," in Proceedings of ACM MobiCom. ACM, 2009, pp. 61-72.
25. A. Goldsmith, "Stanford University EE 359 Wireless Communications Course Notes," http://www.stanford.edu/class/ee359/.
26. G. W. Hart, "Nonintrusive appliance load monitoring," Proceedings of the IEEE, vol. 80, no. 12, pp. 1870-1891, 1992.
27. V. Brik, S. Banerjee, M. Gruteser, and S. Oh, "Wireless device identification with radiometric signatures," in Proceedings of ACM MobiCom, 2008, pp. 116-127.
28. N. Patwari and S. K. Kasera, "Robust location distinction using temporal link signatures," in Proceedings of ACM MobiCom, 2007, pp. 111-122.
29. J. Proakis, Digital Communications. McGraw-Hill Science, 2000.
30. F. C. Commission, "Operation within the bands 902-928 MHz, 2400-2483.5 MHz, and 5725-5850 MHz." Section 15.247.
31. S. Leeb, S. Shaw, and J. Kirtley, J.L., "Transient event detection in spectral envelope estimates for nonintrusive load monitoring," Power Delivery, IEEE Transactions on, vol. 10, no. 3, pp. 1200 -1210, 1995.
32. C. Laughman, K. Lee, R. Cox, S. Shaw, S. Leeb, L. Norford, and P. Armstrong, "Power signature analysis," Power and Energy Magazine, IEEE, vol. 1, no. 2, pp. 56 - 63, 2003.
33. M. Marceau and R. Zmeureanu, "Nonintrusive load disaggregation computer program to estimate the energy consumption of major end uses in residential buildings," Energy Conversion and Management, vol. 41, no. 13, pp. 1389 - 1403, 2000.
34. S. Gupta, M. S. Reynolds, and S. N. Patel, "ElectriSense: Single-point sensing using EMI for electrical event detection and classification in the home," in Proceedings of ACM Ubicomp, 2010, pp. 139-148.
35. S. McLaughlin, P. McDaniel, and W. Aiello, "Protecting consumer privacy from electric load monitoring," in Proceedings of ACM CCS, 2011, pp. 87-98.
36. I. Rouf, R. D. Miller, H. A. Mustafa, T. Taylor, S. Oh, W. Xu, M. Gruteser, W. Trappe, and I. Seskar, "Security and privacy vulnerabilities of in-car wireless networks: A tire pressure monitoring system case study," in Proceedings of USENIX Security Symposium, 2010, pp. 323-338.
37. K. Nohl and D. Evans, "Reverse-engineering a cryptographic RFID tag," in Proceedings of USENIX Security Symposium, 2008.
38. S. C. Bono, M. Green, A. Stubblefield, A. Juels, A. D. Rubin, and M. Szydlo, "Security analysis of a cryptographically-enabled RFID device," in Proceedings of USENIX Security Symposium, 2005.
39. From Fish to Colossus: How the German Lorenz Cipher was Broken at Bletchley Park. Cragon Books, 2003.
40. M. Bortolozzo, M. Centenaro, R. Focardi, and G. Steel, "Attacking and fixing PKCS 11 security tokens," in Proceedings of ACM CCS, 2010.
41. S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham, and S. Savage, "Comprehensive experimental analyses of automotive attack surfaces," in Proceedings of USENIX Security Symposium, 2011.
42. A. Francillon, B. Danev, and S. Capkun, "Relay attacks on passive keyless entry and start systems in modern cars," in Proceedings of NDSS Symposium, 2011.
43. T. Eisenbarth, T. Kasper, A. Moradi, C. Paar, M. Salmasizadeh, and M. M. Shalmani, "On the power of power analysis in the real world: A complete break of the KeeLoq code hopping scheme," in Proceedings of CRYPTO, 2008.
44. S. Indesteege, N. Keller, O. Dunkelman, E. Biham, and B. Preneel, "A practical attack on KeeLoq," in Proceedings of EUROCRYPT, 2008.
45. S. Clark, T. Goodspeed, P. Metzger, Z. Wasserman, and M. Blaze, "Why (Special Agent) Johnny (Still) Can't Encrypt: A Security Analysis of the APCO Project 25 Two-Way Radio System," in Proceedings of USENIX Security Symposium, 2011.
46. S. Gollakota, H. Hassanieh, B. Ransford, D. Katabi, and K. Fu, "They can hear your heartbeats: non-invasive security for implantable medical devices," in Proceedings of the ACM SIGCOMM, 2011, pp. 2-13.