{"id":"https://openalex.org/W4400121639","doi":"https://doi.org/10.1145/3634737.3644999","title":"Uncovering Covert Attacks on EV Charging Infrastructure: How OCPP Backend Vulnerabilities Could Compromise Your System","display_name":"Uncovering Covert Attacks on EV Charging Infrastructure: How OCPP Backend Vulnerabilities Could Compromise Your System","publication_year":2024,"publication_date":"2024-06-28","ids":{"openalex":"https://openalex.org/W4400121639","doi":"https://doi.org/10.1145/3634737.3644999"},"language":"en","primary_location":{"id":"doi:10.1145/3634737.3644999","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3634737.3644999","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063271538","display_name":"Khaled Sarieddine","orcid":"https://orcid.org/0000-0002-6099-2502"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Khaled Sarieddine","raw_affiliation_strings":["Concordia University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0002-6099-2502","affiliations":[{"raw_affiliation_string":"Concordia University, Montreal, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008994823","display_name":"Mohammad Ali Sayed","orcid":"https://orcid.org/0000-0001-6178-453X"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mohammad Ali Sayed","raw_affiliation_strings":["Concordia University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6178-453X","affiliations":[{"raw_affiliation_string":"Concordia University, Montreal, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048698954","display_name":"Sadegh Torabi","orcid":"https://orcid.org/0000-0003-2811-3536"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sadegh Torabi","raw_affiliation_strings":["George Mason University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0003-2811-3536","affiliations":[{"raw_affiliation_string":"George Mason University, Montreal, Canada","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108716667","display_name":"Ribal Attallah","orcid":null},"institutions":[{"id":"https://openalex.org/I47099075","display_name":"Hydro-Qu\u00e9bec","ror":"https://ror.org/01nhzsw25","country_code":"CA","type":"government","lineage":["https://openalex.org/I47099075"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ribal Attallah","raw_affiliation_strings":["Hydro-Quebec Research Institute, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0001-9582-6478","affiliations":[{"raw_affiliation_string":"Hydro-Quebec Research Institute, Montreal, Canada","institution_ids":["https://openalex.org/I47099075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044489791","display_name":"Danial Jafarigiv","orcid":"https://orcid.org/0000-0002-5801-9877"},"institutions":[{"id":"https://openalex.org/I47099075","display_name":"Hydro-Qu\u00e9bec","ror":"https://ror.org/01nhzsw25","country_code":"CA","type":"government","lineage":["https://openalex.org/I47099075"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Danial Jafarigiv","raw_affiliation_strings":["Hydro-Quebec Research Institute, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0002-5801-9877","affiliations":[{"raw_affiliation_string":"Hydro-Quebec Research Institute, Montreal, Canada","institution_ids":["https://openalex.org/I47099075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072393948","display_name":"Chadi Assi","orcid":"https://orcid.org/0000-0002-3161-1846"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Chadi Assi","raw_affiliation_strings":["Concordia University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0002-3161-1846","affiliations":[{"raw_affiliation_string":"Concordia University, Montreal, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["Security Research Centre, Concordia University, Quebec, Canada, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3015-3043","affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Quebec, Canada, Montreal, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"977","last_page":"989"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12017","display_name":"Recycling and Waste Management Techniques","score":0.9758999943733215,"subfield":{"id":"https://openalex.org/subfields/2311","display_name":"Industrial and Manufacturing Engineering"},"field":{"id":"https://openalex.org/fields/23","display_name":"Environmental Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9509000182151794,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.8339787125587463},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6528753638267517},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.6389771699905396},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6324546337127686},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4295973777770996}],"concepts":[{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.8339787125587463},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6528753638267517},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.6389771699905396},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6324546337127686},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4295973777770996},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3634737.3644999","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3634737.3644999","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6299999952316284,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2588734850","https://openalex.org/W2752787535","https://openalex.org/W2915606721","https://openalex.org/W3006629274","https://openalex.org/W3117572899","https://openalex.org/W3137197540","https://openalex.org/W3146007814","https://openalex.org/W3149152309","https://openalex.org/W3165878961","https://openalex.org/W3193813538","https://openalex.org/W3209428779","https://openalex.org/W3215327393","https://openalex.org/W4200186003","https://openalex.org/W4230014050","https://openalex.org/W4255386269","https://openalex.org/W4284703709"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2801622120","https://openalex.org/W2164141394","https://openalex.org/W4240977217","https://openalex.org/W3036524962","https://openalex.org/W2508088450","https://openalex.org/W2389434635","https://openalex.org/W4214750239","https://openalex.org/W2279908259"],"abstract_inverted_index":{"The":[0],"Electric":[1],"Vehicle":[2],"(EV)":[3],"charging":[4,55,110,184],"infrastructure":[5,22],"has":[6],"been":[7],"rapidly":[8],"expanding":[9],"to":[10,42,140,150,160,178,190],"keep":[11],"up":[12],"with":[13,86],"the":[14,26,46,53,62,65,75,78,87,91,105,116,119,130,157,162,169,179,182],"increased":[15],"demands":[16],"of":[17,29,33,52,64,77,93,104,118,143,164,181],"EV":[18,35,54,109,183],"consumers.":[19],"This":[20],"government-backed":[21],"expansion":[23],"resulted":[24],"in":[25,49,57,102,129],"rushed":[27],"integration":[28],"a":[30,152],"significant":[31],"number":[32],"insecure":[34],"Charging":[36],"Stations":[37],"(EVCS),":[38],"which":[39,122],"are":[40],"vulnerable":[41],"cyber-attacks.":[43,193],"Motivated":[44],"by":[45,97,186],"uncovered":[47],"vulnerabilities":[48,101],"different":[50],"components":[51],"infrastructure,":[56],"this":[58],"paper,":[59],"we":[60,72,133,176],"study":[61],"security":[63,95,180],"EVCS":[66],"Cloud":[67],"Management":[68],"System":[69],"(CMS).":[70],"Specifically,":[71],"focus":[73],"on":[74,126],"(in)security":[76],"Open":[79],"Charge":[80],"Point":[81],"Protocol":[82],"(OCPP)":[83],"backend":[84],"communication":[85],"EVCS.":[88],"We":[89,154],"verified":[90],"prevalence":[92],"such":[94],"weaknesses":[96],"discovering":[98],"6":[99],"zero-day":[100],"each":[103],"16":[106],"representative":[107],"live":[108],"management":[111],"systems.":[112],"Our":[113],"findings":[114],"highlight":[115],"insecurity":[117],"OCPP":[120],"backend,":[121],"is":[123],"widely":[124],"deployed":[125],"existing":[127],"EVCSs":[128],"wild.":[131],"Indeed,":[132],"discuss":[134],"various":[135],"attack":[136],"scenarios":[137],"that":[138],"lead":[139],"man-in-the-middle,":[141],"denial":[142],"service,":[144],"firmware":[145],"theft,":[146],"and":[147],"data":[148],"poisoning,":[149],"name":[151],"few.":[153],"also":[155,187],"leverage":[156],"developed":[158],"testbed":[159],"demonstrate":[161],"feasibility":[163],"launching":[165],"switching":[166],"attacks":[167],"against":[168],"power":[170],"grid":[171],"using":[172],"compromised":[173],"EVCSs.":[174],"Finally,":[175],"contribute":[177],"ecosystem":[185],"recommending":[188],"countermeasures":[189],"mitigate/prevent":[191],"future":[192]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":4}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2025-10-10T00:00:00"}