Home > slashdot > Security Holes Found In “Smart” Meters

Security Holes Found In “Smart” Meters

March 28th, 2010 03:11 admin Leave a comment Go to comments

Hugh Pickens writes “In the US alone, more than 8 million smart meters, designed to help deliver electricity more efficiently and to measure power consumption in real time, have been deployed by electric utilities and nearly 60 million should be in place by 2020. Now the Associated Press reports that smart meters have security flaws that could let hackers tamper with the power grid, opening the door for attackers to jack up strangers’ power bills, remotely turn someone else’s power on and off, or even allow attackers to get into the utilities’ computer networks to steal data or stage bigger attacks on the grid. Attacks could be pulled off by stealing meters — which can be situated outside of a home — and reprogramming them, or an attacker could sit near a home or business and wirelessly hack the meter from a laptop, according to Joshua Wright, a senior security analyst with InGuardians Inc, a vendor-independent consultant that performs penetration tests and security risk assessments.”

“Wright says that his firm found ‘egregious’ errors, such as flaws in the meters and the technologies that utilities use to manage data (PDF) from meters. For example, smart meters encrypt their data but the digital ‘keys’ needed to unlock the encryption are stored on data-routing equipment known as access points that many meters relay data to so stealing the keys lets an attacker eavesdrop on all communication between meters and that access point (PDF). ‘Even though these protocols were designed recently, they exhibit security failures we’ve known about for the past 10 years,’ says Wright.”

Source: Security Holes Found In “Smart” Meters

Related Articles:

  1. Some Smart Meters Broadcast Readings in the Clear
  2. Ask Slashdot: Are Smart Meters Safe?
  3. The Smart Grid Has Arrived
  4. Smart Meters Wreaking Havoc With Home Electronics
  5. Smart Meters Reveal What You’re Watching
blog comments powered by Disqus