Background Gas and electricity meters are beginning to replace traditional meters and allow remote usage monitoring, configuration and can offer some benefits to both the supplier and consumer. Remote connectivity may use an embedded SIM card to connect with a mobile network provider, or in the case of broadband-connected home, utilize the existing WiFi connection. Customers often have concerns about privacy, confidentiality of data, difficulties in changing their supplier and health due to the use of mobile phone and WiFi technology. Mobile technicians connect to smart meters using an infrared optical port which is more reliable in the many different locations that the meters can be installed in. The technicians use security codes to authenticate and then may alter the configuration or collect information. The long highly-random security codes could be identified by brute force and dictionary attacks. The same functionality is also available remotely, but the optical port is much more exposed. Objectives Identify attacks against authentication functions Detect extremely unusual activity Detection points The detection points must be built in to the meter’s logic. Response actions The automated response actions must not disrupt consumers’ supplies under any and thresholds circumstance. Logging an alert messages to the supplier’s head-end systems are the only response actions. These require local logging and alert message signaling capabilities. Non singular event thresholds refer to rolling 24 hour periods. No more than one alert message to be sent in any 60 minute period. Chapter 8 : Case Study of a Financial Market Trading System Detection of collusion between financial market traders.
Background Gas and electricity meters are beginning to replace traditional meters and allow remote usage monitoring, configuration and can offer some benefits to both the supplier and consumer. Remote connectivity may use an embedded SIM card to connect with a mobile network provider, or in the case of broadband-connected home, utilize the existing WiFi connection. Customers often have concerns about privacy, confidentiality of data, difficulties in changing their supplier and health due to the use of mobile phone and WiFi technology. Mobile technicians connect to smart meters using an infrared optical port which is more reliable in the many different locations that the meters can be installed in. The technicians use security codes to authenticate and then may alter the configuration or collect information. The long highly-random security codes could be identified by brute force and dictionary attacks. The same functionality is also available remotely, but the optical port is much more exposed. Objectives Identify attacks against authentication functions Detect extremely unusual activity Detection points The detection points must be built in to the meter’s logic. Response actions and thresholds The automated response actions must not disrupt consumers’ supplies under any circumstance. Logging an alert messages to the supplier’s head-end systems are the only response actions. These require local logging and alert message signaling capabilities. Non singular event thresholds refer to rolling 24 hour periods. No more than one alert message to be sent in any 60 minute period. Chapter 8 : Case Study of a Financial Market Trading System Detection of collusion between financial market traders.