Papers for

ev charging network operators

Papers whose findings have a practical use for this group, as judged from the abstract. Open a paper to read what it means in practice.

Evsefuzz tool improves security testing of ev charging protocols

EVSEFuzz : A Tool for Automated Testing of Protocol Implementations

Abstract: The rapid adoption and development of electric vehicle (EV) networks has required the expansive deployment of EV charging infrastructure (EVCI) which relies on communication protocols such as the open charge point protocol (OCPP) to coordinate data transfer between charging network operators and the EV supply equipment. In this paper, we present EVSEFuzz, a tool for automatically building fuzzers to test the security of protocol implementations. To achieve this we make a novel use of Python datatype validation packages and tools to ``understand'' datatypes and message structures and generate both compliant and non-compliant messages. To date, EVSEFuzz has been tested successfully with several open and closed-source implementations and has found several vulnerabilities leading to the publication of two CVEs.

Fri 23 OctCryptography and Security
The gist
Electric vehicle charging stations communicate using special protocols, but these communications can have security problems. The authors created EVSEFuzz, a tool that automatically sends both correct and incorrect messages to charging equipment to find security flaws. This tool uses Python packages to understand the message formats, which helps it test many different implementations. EVSEFuzz has found real vulnerabilities in different charging systems, showing it can improve the safety of electric vehicle networks.
Open → 2610.32902v1