{"id":"https://openalex.org/W4385349628","doi":"https://doi.org/10.1145/3609508","title":"Investigating the Security of EV Charging Mobile Applications as an Attack Surface","display_name":"Investigating the Security of EV Charging Mobile Applications as an Attack Surface","publication_year":2023,"publication_date":"2023-07-28","ids":{"openalex":"https://openalex.org/W4385349628","doi":"https://doi.org/10.1145/3609508"},"language":"en","primary_location":{"id":"doi:10.1145/3609508","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609508","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609508","source":{"id":"https://openalex.org/S2506189754","display_name":"ACM Transactions on Cyber-Physical Systems","issn_l":"2378-962X","issn":["2378-962X","2378-9638"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Cyber-Physical Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3609508","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063271538","display_name":"Khaled Sarieddine","orcid":"https://orcid.org/0000-0002-6099-2502"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Khaled Sarieddine","raw_affiliation_strings":["The Security Research Centre, Concordia University, Canada"],"raw_orcid":"https://orcid.org/0000-0002-6099-2502","affiliations":[{"raw_affiliation_string":"The Security Research Centre, Concordia University, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008994823","display_name":"Mohammad Ali Sayed","orcid":"https://orcid.org/0000-0001-6178-453X"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mohammad Ali Sayed","raw_affiliation_strings":["The Security Research Centre, Concordia University, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6178-453X","affiliations":[{"raw_affiliation_string":"The Security Research Centre, Concordia University, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048698954","display_name":"Sadegh Torabi","orcid":"https://orcid.org/0000-0003-2811-3536"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sadegh Torabi","raw_affiliation_strings":["Center for Secure Information Systems, George Mason University, USA"],"raw_orcid":"https://orcid.org/0000-0003-2811-3536","affiliations":[{"raw_affiliation_string":"Center for Secure Information Systems, George Mason University, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057593270","display_name":"Ribal Atallah","orcid":"https://orcid.org/0000-0001-9582-6478"},"institutions":[{"id":"https://openalex.org/I47099075","display_name":"Hydro-Qu\u00e9bec","ror":"https://ror.org/01nhzsw25","country_code":"CA","type":"government","lineage":["https://openalex.org/I47099075"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ribal Atallah","raw_affiliation_strings":["Hydro-Quebec Research Institute, Canada"],"raw_orcid":"https://orcid.org/0000-0001-9582-6478","affiliations":[{"raw_affiliation_string":"Hydro-Quebec Research Institute, Canada","institution_ids":["https://openalex.org/I47099075"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072393948","display_name":"Chadi Assi","orcid":"https://orcid.org/0000-0002-3161-1846"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Chadi Assi","raw_affiliation_strings":["The Security Research Centre, Concordia University, Canada"],"raw_orcid":"https://orcid.org/0000-0002-3161-1846","affiliations":[{"raw_affiliation_string":"The Security Research Centre, Concordia University, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.8122,"has_fulltext":true,"cited_by_count":58,"citation_normalized_percentile":{"value":0.9638717,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"7","issue":"4","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10768","display_name":"Electric Vehicles and Infrastructure","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10768","display_name":"Electric Vehicles and Infrastructure","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13553","display_name":"Age of Information Optimization","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8391467332839966},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.7751814126968384},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.6475771069526672},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6462193131446838},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6286516785621643},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5815194249153137},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.5701225996017456},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.5116753578186035},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4419757127761841},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11456263065338135}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8391467332839966},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.7751814126968384},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.6475771069526672},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6462193131446838},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6286516785621643},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5815194249153137},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.5701225996017456},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.5116753578186035},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4419757127761841},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11456263065338135},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3609508","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609508","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609508","source":{"id":"https://openalex.org/S2506189754","display_name":"ACM Transactions on Cyber-Physical Systems","issn_l":"2378-962X","issn":["2378-962X","2378-9638"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Cyber-Physical Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3609508","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609508","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609508","source":{"id":"https://openalex.org/S2506189754","display_name":"ACM Transactions on Cyber-Physical Systems","issn_l":"2378-962X","issn":["2378-962X","2378-9638"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Cyber-Physical Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6399999856948853,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G214618758","display_name":null,"funder_award_id":"ALLRP567144-21","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"},{"id":"https://openalex.org/G2477871873","display_name":null,"funder_award_id":"ALLRP 567144-21","funder_id":"https://openalex.org/F4320321588","funder_display_name":"Concordia University"}],"funders":[{"id":"https://openalex.org/F4320321588","display_name":"Concordia University","ror":"https://ror.org/0420zvk78"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385349628.pdf","grobid_xml":"https://content.openalex.org/works/W4385349628.grobid-xml"},"referenced_works_count":37,"referenced_works":["https://openalex.org/W1943316307","https://openalex.org/W1979883320","https://openalex.org/W2018237415","https://openalex.org/W2036251084","https://openalex.org/W2062477334","https://openalex.org/W2113806531","https://openalex.org/W2135797872","https://openalex.org/W2164170598","https://openalex.org/W2325295752","https://openalex.org/W2588734850","https://openalex.org/W2788558810","https://openalex.org/W2794179762","https://openalex.org/W2808710537","https://openalex.org/W2964171381","https://openalex.org/W2964256141","https://openalex.org/W2967200523","https://openalex.org/W2967611898","https://openalex.org/W2970532630","https://openalex.org/W2992608304","https://openalex.org/W3006629274","https://openalex.org/W3045935991","https://openalex.org/W3108634995","https://openalex.org/W3145348075","https://openalex.org/W3149152309","https://openalex.org/W3165878961","https://openalex.org/W3209428779","https://openalex.org/W3215327393","https://openalex.org/W4206647748","https://openalex.org/W4230096340","https://openalex.org/W4240601173","https://openalex.org/W4246315078","https://openalex.org/W4249907277","https://openalex.org/W4255793286","https://openalex.org/W4292907343","https://openalex.org/W4297440254","https://openalex.org/W4323644051","https://openalex.org/W4380887541"],"related_works":["https://openalex.org/W17155033","https://openalex.org/W3207760230","https://openalex.org/W1496222301","https://openalex.org/W1590307681","https://openalex.org/W4312814274","https://openalex.org/W2478244259","https://openalex.org/W2187854411","https://openalex.org/W2902040535","https://openalex.org/W41015297","https://openalex.org/W2883540030"],"abstract_inverted_index":{"The":[0,158,203],"adoption":[1],"rate":[2],"of":[3,26,89,98,117,127,140,178,218,242],"EVs":[4],"has":[5],"witnessed":[6],"a":[7,79,95,115,168],"significant":[8,268],"increase":[9,36],"in":[10,103],"recent":[11],"years":[12],"driven":[13],"by":[14],"multiple":[15],"factors,":[16],"chief":[17],"among":[18],"which":[19,187],"is":[20],"the":[21,45,86,90,104,125,141,176,199,208,213,216,240,260,279],"increased":[22],"flexibility":[23],"and":[24,35,62,73,119,181,195,215,228,270,281,287],"ease":[25],"access":[27],"to":[28,55,77,123,190,252,277],"charging":[29,47,50,60,68,75,92,106,131,193,249],"infrastructure.":[30,202],"To":[31],"improve":[32],"user":[33],"experience":[34],"system":[37],"flexibility,":[38],"mobile":[39,51,107,132,145,210,250],"applications":[40,52,108,146,211,251],"have":[41],"been":[42],"incorporated":[43],"into":[44],"EV":[46,49,91,105,130,232,248],"ecosystem.":[48],"allow":[53,188],"consumers":[54],"remotely":[56,191],"trigger":[57],"actions":[58],"on":[59,138,167,231],"stations":[61],"use":[63],"functionalities":[64],"such":[65,153],"as":[66,109,154],"start/stop":[67],"sessions,":[69],"pay":[70],"for":[71,184],"usage,":[72],"locate":[74],"stations,":[76],"name":[78],"few.":[80],"In":[81],"this":[82],"article,":[83],"we":[84,222,274],"study":[85],"security":[87,126],"posture":[88],"ecosystem":[93],"against":[94,198,259],"new":[96],"type":[97],"remote":[99,225,256,289],"that":[100,161],"exploits":[101],"vulnerabilities":[102,164,245],"an":[110],"attack":[111,159,226],"surface.":[112],"We":[113],"leverage":[114],"combination":[116],"static":[118],"dynamic":[120],"analysis":[121,135,237],"techniques":[122],"analyze":[124],"widely":[128,143],"used":[129,144],"applications.":[133],"Our":[134,173],"was":[136],"performed":[137],"31":[139],"most":[142],"including":[147],"their":[148,229],"interactions":[149],"with":[150,267],"various":[151,247],"components":[152],"cloud":[155],"management":[156],"systems.":[157],"scenarios":[160,227],"exploit":[162],"these":[163],"were":[165,205],"verified":[166],"real-time":[169],"co-simulation":[170],"test":[171],"bed.":[172],"discoveries":[174],"indicate":[175],"lack":[177],"user/vehicle":[179],"verification":[180],"improper":[182],"authorization":[183],"critical":[185,201,262],"functions,":[186],"adversaries":[189,283],"hijack":[192],"sessions":[194],"launch":[196],"attacks":[197,204,258,290],"connected":[200,261],"demonstrated":[206],"using":[207,291],"EVCS":[209],"showing":[212],"feasibility":[214,241],"applicability":[217],"our":[219,236],"attacks.":[220],"Indeed,":[221],"discuss":[223],"specific":[224],"impact":[230],"users.":[233],"More":[234],"importantly,":[235],"results":[238],"demonstrate":[239],"leveraging":[243],"existing":[244],"across":[246],"perform":[253],"wide-scale":[254],"coordinated":[255],"charging/discharging":[257],"infrastructure":[263,280],"(e.g.,":[264],"power":[265],"grid),":[266],"economical":[269],"operational":[271],"implications.":[272],"Finally,":[273],"propose":[275],"countermeasures":[276],"secure":[278],"impede":[282],"from":[284],"performing":[285],"reconnaissance":[286],"launching":[288],"compromised":[292],"accounts.":[293]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":23},{"year":2024,"cited_by_count":20},{"year":2023,"cited_by_count":5}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}