Conference item
Assault and battery: evaluating the security of power conversion systems against electromagnetic injection attacks
- Abstract:
- Many modern devices, including critical infrastructure, depend on the reliable operation of electrical power conversion systems. The small size and versatility of switched-mode power converters has led to their widespread use. While transformer-based systems passively convert voltage, switched-mode power converters have an actively controlled feedback loop that relies on accurate sensor measurements. Previous academic work has shown that many types of sensors are vulnerable to Intentional Electromagnetic Interference (IEMI) attacks, and it has been speculated that power converters are also susceptible.In this paper, we present the first detailed and practical evaluation of IEMI attacks against switched-mode power converters as a whole by manipulating the voltage and current sensors in their feedback loops. We develop a novel multi-frequency IEMI attack technique to effectively target devices with multiple sensors. We experimentally validate our theoretical predictions by analyzing multiple AC-DC and DC-DC converters, automotive-grade current sensors, dedicated battery chargers, and a real-world electric vehicle charger. Our attack is reliably effective at overcharging and permanently damaging Li-ion cells, and causing the EV charger to output 50 V more than it reports.
- Publication status:
- Published
- Peer review status:
- Peer reviewed
Actions
Access Document
- Files:
-
-
(Preview, Accepted manuscript, pdf, 6.6MB, Terms of use)
-
- Publisher copy:
- 10.1109/ACSAC63791.2024.00033
Authors
- Publisher:
- IEEE
- Host title:
- 2024 Annual Computer Security Applications Conference (ACSAC)
- Pages:
- 224-239
- Publication date:
- 2025-03-18
- Acceptance date:
- 2024-10-29
- Event title:
- 40th Annual Computer Security Applications Conference (ACSAC 2024)
- Event location:
- Honolulu, Hawai'i, USA
- Event website:
- https://www.acsac.org/
- Event start date:
- 2024-12-09
- Event end date:
- 2024-12-13
- DOI:
- EISSN:
-
2576-9103
- ISSN:
-
1063-9527
- EISBN:
- 9798331520885
- ISBN:
- 9798331520892
- Language:
-
English
- Keywords:
- Pubs id:
-
2032164
- Local pid:
-
pubs:2032164
- Deposit date:
-
2024-12-20
- ARK identifier:
Terms of use
- Copyright holder:
- IEEE
- Copyright date:
- 2024
- Rights statement:
- © 2024 IEEE.
- Notes:
- This paper was presented at the Annual Computer Security Applications Conference (ACSAC), 9th-13th December 2024, Honolulu, Hawai'i, USA. For the purpose of open access, the authors have applied a Creative Commons Attribution (CC BY) license to any Accepted Manuscript version arising.
- Licence:
- CC Attribution (CC BY)
If you are the owner of this record, you can report an update to it here: Report update to this record