Implementation Aspects of MeterGoat, a Smart Meter Security Training Platform

Abstract

With the increase in popularity of smart devices for metering purposes, the concerns and the scope of the threats also gets bigger. In order to raise awareness and provide a simulated environment for information security training to smart meter manufacturers, we developed MeterGoat, which is a flexible framework for smart meter penetration testing. In this research paper, we describe the implementation of MeterGoat and present some sample lessons that explore vulnerabilities based on weak anti-tampering techniques, flawed authentication, and improper use of cryptography.