US-13-Blackouts-Issues-with-Wireless-Metering-Protocols-Slid

Energy Fraud and Orchestrated BlackoutsIssues with Wireless Metering Protocols (wM-Bus)Black Hat USA 2013, Las Vegas, July 31st - Aug 1st 2013 cyrill.brunschwiler@csnc.chCompass Security AG Werkstrasse 20 P.O. Box 2038 CH-8645 JonaTel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch www.csnc.ch

AgendaIntroMaking Of Smart Grids Smart Metering¡ ¡ ¡Wireless M-BusApplication Protocol Stack Communication Modes Protocol Overview (Frames, Transport Layer, Data Headers, Relaying) Protocol Analysis (Privacy, Confidentiality, Integrity) Attack Scenario¡ ¡Demo Conclusion, Outlook© Compass Security AG www.csnc.ch Slide 2¡¡¡¡

IntroCompass Security AG Werkstrasse 20 P.O. Box 2038 CH-8645 JonaTel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch www.csnc.ch

Intro – Making OfTimelineSummer 2011: Autumn 2012: X-mas 2012: X-mas 2012: February 2013: February 2013: March 2013: March 2013: Summer 2013: Got attention of wireless M-Bus in smart metering Started MSc thesis on smart meters and wireless M-Bus German BSI/OMS group published Security Report“ Short mention of M-Bus being inadequate“ at CCC in Hamburg, Germany Spent some time digging through EN paperwork Spent some time in an M-Bus lab environment Finished analysis of M-Bus current resp. draft standards German BSI mentions wM-Bus security being insufficient Publication at Black Hat USA                 © Compass Security AGwww.csnc.chSlide 4

Intro – Smart GridsSmart Grid Blue Print© Compass Security AGwww.csnc.chSlide 5

Intro – Smart MeteringSmart Metering Blue PrintLegendDSO Distribution System Operator NAN Neighbourhood Area Network Wireless M-Bus¢ ¢ ¢© Compass Security AGwww.csnc.chSlide 6

Intro - Smart MeteringHome InstallationLegendHAN Home Area Network Wired and Wireless M-Bus£ £© Compass Security AGwww.csnc.chSlide 7

Wireless M-BusCompass Security AG Werkstrasse 20 P.O. Box 2038 CH-8645 JonaTel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch www.csnc.ch

ApplicationMarket segmentPopular in remote meter reading Heat, Water, Gas, Electricity 15 million devices deployed (figures from 2010) Mainly spread across Europe¤ ¤ ¤ ¤ ¤ ¤ ¤UsageRemote meter reading Drive-by meter reading Meter maintenance and configuration Becoming popular for smart metering applications Tariff schemes, real-time-pricing Demand-response Pre-payment Load-limit Remote disconnect¤ ¤ ¤ ¤© Compass Security AG¤¤www.csnc.chSlide 9

Communication ModesModesStationary Mode (S) is to be used for communication with battery driven collectors. Specific modes exist for one-way and two-way communication. Frequent Transmit Mode (T) is optimised for drive-by readout. Mode T does provide specific modes for one-way and two-way communication. Frequent Receive Mode (R2) allows for simultaneous readout of multiple meters. Mainly used for gateways and drive-by meter reading. Compact Mode (C) is comparable to mode T but allows for increased data throughput. This is achieved by using NRZ for line coding. Narrowband VHF Mode (N) is optimised for transmission within a lower frequency narrow band. It is intended for long range repeater use and does specify modes for one-way, two-way and relay communication. Frequent Receive and Transmit Mode (F) is optimised for long range communication and is also split into one-way and two-way sub modes. Precision Timing Protocol Mode (Q) provides distribution of time information taking network latency and battery optimised nodes into account. Router based Protocol Mode (P) changes addressing to include source and destination to allow for real routingwww.csnc.ch Slide 10¥ ¥ ¥ ¥ ¥ ¥ ¥ ¥© Compass Security AG

Protocol StackInvolved StandardsLayer Application Network Data Link Physical Standard prEN 13757-3 EN 13757-5 prEN 13757-4 prEN 13757-4 Description M-bus dedicated application layer (specified application layer security) Wireless relaying (optional for meters supporting the router approach) Wireless meter readout (specifies link layer security) Wireless meter readout (specifies use of 868MHz, 433MHz, 169MHz bands)LegendEN pr European Norm Draft Standard¦ ¦© Compass Security AGwww.csnc.chSlide 11

Protocol OverviewCompass Security AG Werkstrasse 20 P.O. Box 2038 CH-8645 JonaTel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch www.csnc.ch

Protocol OverviewPhysical LayerLine coding (depends on communication mode) 3 of 6 code (constant-weight code) Manchester coding NRZ coding§ § § § § § § § §Data Link LayerFrames Device addressing Specification of payload (CI field) Cyclic redundancy checks (polynomial is 0x3d65) Types A and B (B has less redundancy checks) Extended Link Layer Provides encryption (AES-128 in CTR mode)§ §© Compass Security AGwww.csnc.chSlide 13

Protocol OverviewData Link Layer: CRC calculation using reveng….© Compass Security AGwww.csnc.chSlide 14

Protocol OverviewData Link Layer, First Block Example Capture (Sent by meter, CRCs removed) 1E 44 2D 2C 07 71 94 15 01 02 7A B3 00 10 85 BF 5C 93 72 04 76 59 50 24 16 93 27 D3 03 58 C8Field Length Control Manuf. ID Address Value 1E 44 2D 2C 07 71 94 15 01 02 Interpretation 30 bytes frame length (exclusive length byte) Indicates message from primary station, function send/no reply (SND-NR) Coded for Kamstrup (KAM) calculated as specified in prEN 13757-3. ID is managed by the flag association. Identification: Device Type: Version:www.csnc.ch15 94 71 07 (little-endian) 02 (electricity meter) 01Slide 15© Compass Security AG

Protocol OverviewData Link Layer, Control Information Field Example Capture (Sent by meter, CRCs removed) 1E …… 此处隐藏：5669字，全部文档内容请下载后查看。喜欢就下载吧 ……