No abstract

With the increase in popularity of smart devices for metering purposes, the concerns and the scope of the threats also gets bigger. In order to raise awareness and provide a simulated environment for information security training to smart meter manufacturers, we developed MeterGoat, which is a flexible framework for smart meter penetration testing. In this research paper, we describe the implementation of MeterGoat and present some sample lessons that explore vulnerabilities based on weak anti-tampering techniques, flawed authentication, and improper use of cryptography.

No abstract