{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T23:56:46Z","timestamp":1784246206803,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":47,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3644999","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T11:51:38Z","timestamp":1719575498000},"page":"977-989","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["Uncovering Covert Attacks on EV Charging Infrastructure: How OCPP Backend Vulnerabilities Could Compromise Your System"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6099-2502","authenticated-orcid":false,"given":"Khaled","family":"Sarieddine","sequence":"first","affiliation":[{"name":"Concordia University, Montreal, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6178-453X","authenticated-orcid":false,"given":"Mohammad Ali","family":"Sayed","sequence":"additional","affiliation":[{"name":"Concordia University, Montreal, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2811-3536","authenticated-orcid":false,"given":"Sadegh","family":"Torabi","sequence":"additional","affiliation":[{"name":"George Mason University, Montreal, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9582-6478","authenticated-orcid":false,"given":"Ribal","family":"Attallah","sequence":"additional","affiliation":[{"name":"Hydro-Quebec Research Institute, Montreal, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5801-9877","authenticated-orcid":false,"given":"Danial","family":"Jafarigiv","sequence":"additional","affiliation":[{"name":"Hydro-Quebec Research Institute, Montreal, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3161-1846","authenticated-orcid":false,"given":"Chadi","family":"Assi","sequence":"additional","affiliation":[{"name":"Concordia University, Montreal, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3015-3043","authenticated-orcid":false,"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[{"name":"Security Research Centre, Concordia University, Quebec, Canada, Montreal, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Building a green economy: Government of Canada to require 100% of car and passenger truck sales be zero-emission by 2035 in Canada. Transport Canada (Jun","year":"2021","unstructured":"2021. Building a green economy: Government of Canada to require 100% of car and passenger truck sales be zero-emission by 2035 in Canada. Transport Canada (Jun 2021). https:\/\/www.canada.ca\/en\/transport-canada"},{"key":"e_1_3_2_1_2_1","unstructured":"2022. Attack Surface Management and Data Solutions. https:\/\/censys.io\/"},{"key":"e_1_3_2_1_3_1","unstructured":"2022. Chinese province plans to ban the sale of gasoline-powered cars. https:\/\/shorturl.at\/nswIV"},{"key":"e_1_3_2_1_4_1","unstructured":"2022. Cyberspace search engine. https:\/\/www.zoomeye.org\/"},{"key":"e_1_3_2_1_5_1","unstructured":"2022. Isle of wight: Council's Electric Vehicle Chargers hacked to show porn site. https:\/\/www.bbc.com\/news\/uk-england-hampshire-61006816"},{"key":"e_1_3_2_1_6_1","unstructured":"2022. Search Engine for the Internet of Everything. https:\/\/www.shodan.io\/"},{"key":"e_1_3_2_1_7_1","unstructured":"2023. Splunk (Mar 2023). https:\/\/www.splunk.com\/en_us\/blog\/learn\/zero-day.html"},{"key":"e_1_3_2_1_8_1","unstructured":"2023. Biden-Harris Administration Opens Applications for First Round of $2.5 Billion Program to Build EV Charging in Communities & Neighborhoods Nationwide. https:\/\/shorturl.at\/jxAC4."},{"key":"e_1_3_2_1_9_1","unstructured":"1N3. [n. d.]. 1N3\/intruderpayloads: A collection of burpsuite intruder payloads Burpbounty payloads Fuzz Lists malicious file uploads and web pentesting methodologies and checklists. https:\/\/github.com\/1N3\/IntruderPayloads"},{"key":"e_1_3_2_1_10_1","volume-title":"Hacked Electrify America Charger exposes major cyber-security risk. ScreenRant (Jan","author":"Akuchie Michael","year":"2023","unstructured":"Michael Akuchie. 2023. Hacked Electrify America Charger exposes major cyber-security risk. ScreenRant (Jan 2023). https:\/\/screenrant.com\/electrify-america-hacked-charger-cybersecurity-risk\/"},{"key":"e_1_3_2_1_11_1","volume-title":"Voltage collapse prediction for interconnected power systems","author":"Al-Hinai Amer S","unstructured":"Amer S Al-Hinai. 2000. Voltage collapse prediction for interconnected power systems. West Virginia University."},{"key":"e_1_3_2_1_12_1","volume-title":"International Journal of Information Security","author":"Alcaraz Cristina","year":"2023","unstructured":"Cristina Alcaraz, Jesus Cumplido, and Alicia Trivino. 2023. OCPP in the spotlight: threats and countermeasures for electric vehicle charging infrastructures 4.0. International Journal of Information Security (2023), 1--27."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2017.2669647"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","first-page":"11116","DOI":"10.1109\/TITS.2021.3100875","article-title":"A Data Driven Performance Analysis Approach for Enhancing the QoS of Public Charging Stations","volume":"23","author":"Antoun Joseph","year":"2021","unstructured":"Joseph Antoun, Mohammad Ekramul Kabir, Ribal F Atallah, and Chadi Assi. 2021. A Data Driven Performance Analysis Approach for Enhancing the QoS of Public Charging Stations. IEEE Transactions on Intelligent Transportation Systems 23, 8 (2021), 11116--11125.","journal-title":"IEEE Transactions on Intelligent Transportation Systems"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.001.1900348"},{"key":"e_1_3_2_1_16_1","first-page":"407","volume-title":"Losing the Car Keys: Wireless PHY-Layer Insecurity in EV Charging. In 28th USENIX Security Symposium (USENIX Security 19)","author":"Baker Richard","year":"2019","unstructured":"Richard Baker and Ivan Martinovic. 2019. Losing the Car Keys: Wireless PHY-Layer Insecurity in EV Charging. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 407-424. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/baker"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00450-017-0342-y"},{"key":"e_1_3_2_1_18_1","unstructured":"Natural Resources Canada. 2023. Government of Canada. https:\/\/natural-resources.canada.ca\/energy-efficiency\/transportation-alternative-fuels\/zero-emission-vehicle-infrastructure-program\/21876"},{"key":"e_1_3_2_1_19_1","unstructured":"Natural Resources Canada and U.S. Department of Energy. [n. d.]. Final Report on the Implementation of the Task Force Recommendations. https:\/\/www.ieso.ca\/en\/Corporate-IESO\/Media\/Also-of-Interest\/Blackout-2003"},{"key":"e_1_3_2_1_20_1","volume-title":"Computer Security - ESORICS","author":"Conti Mauro","year":"2022","unstructured":"Mauro Conti, Denis Donadel, Radha Poovendran, and Federico Turrin. 2022. EVExchange: A Relay Attack on Electric Vehicle Charging System. In Computer Security - ESORICS 2022. Springer International Publishing, Cham, 488--508."},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings, Part II. Springer, 716--736","author":"Cumplido Jesus","year":"2022","unstructured":"Jesus Cumplido, Cristina Alcaraz, and Javier Lopez. 2022. Collaborative anomaly detection system for charging stations. In Computer Security-ESORICS 2022: 27th European Symposium on Research in Computer Security, Copenhagen, Denmark, September 26--30, 2022, Proceedings, Part II. Springer, 716--736."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3437258"},{"key":"e_1_3_2_1_23_1","unstructured":"OWASP Foundation. [n. d.]. Owasp Top Ten. https:\/\/owasp.org\/www-project-top-ten\/"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2022.3184448"},{"key":"e_1_3_2_1_25_1","volume-title":"Dataset security for machine learning: Data poisoning, backdoor attacks, and defenses","author":"Goldblum Micah","year":"2022","unstructured":"Micah Goldblum, Dimitris Tsipras, Chulin Xie, Xinyun Chen, Avi Schwarzschild, Dawn Song, Aleksander Madry, Bo Li, and Tom Goldstein. 2022. Dataset security for machine learning: Data poisoning, backdoor attacks, and defenses. IEEE Transactions on Pattern Analysis and Machine Intelligence (2022)."},{"key":"e_1_3_2_1_26_1","volume-title":"Cyber-physical System Security of Vehicle Charging Stations. In 2019 IEEE Green Technologies Conference(GreenTech). 1--5.","author":"Gottumukkala Raju","year":"2019","unstructured":"Raju Gottumukkala, Rizwan Merchant, Adam Tauzin, Kaleb Leon, Andrew Roche, and Paul Darby. 2019. Cyber-physical System Security of Vehicle Charging Stations. In 2019 IEEE Green Technologies Conference(GreenTech). 1--5."},{"key":"e_1_3_2_1_27_1","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Huang Bing","year":"2019","unstructured":"Bing Huang, Alvaro A. Cardenas, and Ross Baldick. 2019. Not Everything is Dark and Gloomy: Power Grid Protections Against IoT Demand Attacks. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1115--1132. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/huang"},{"key":"e_1_3_2_1_28_1","unstructured":"IEA. [n. d.]. Global EV Outlook 2022 - analysis. https:\/\/www.iea.org\/reports\/global-ev-outlook-2022"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2021.3083696"},{"key":"e_1_3_2_1_30_1","volume-title":"Using CWE and CVSS scores to get more context on a security advisory. The GitHub Blog (Feb","author":"Kaczorowski Maya","year":"2021","unstructured":"Maya Kaczorowski. 2021. Using CWE and CVSS scores to get more context on a security advisory. The GitHub Blog (Feb 2021). https:\/\/github.blog\/2021-02-09-using-cwe-and-cvss-scores-to-get-more-context-on-a-security-advisory\/"},{"key":"e_1_3_2_1_31_1","volume-title":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","author":"K\u00f6hler Sebastian","year":"2022","unstructured":"Sebastian K\u00f6hler, Richard Baker, Martin Strohmeier, and Ivan Martinovic. 2022. Demo: End-to-End Wireless Disruption of CCS EV Charging. In Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security (Los Angeles, CA, USA) (CCS '22). Association for Computing Machinery, New York, NY, USA, 3515--3517."},{"key":"e_1_3_2_1_32_1","unstructured":"Chris Jewers For Mailonline. 2022. Russian motorway's electric vehicle chargers are hacked to display message supporting Ukraine. https:\/\/shorturl.at\/irvAX"},{"key":"e_1_3_2_1_33_1","volume-title":"Mastering VMware VSphere 6.7","author":"Marshall Nick","unstructured":"Nick Marshall, Mike Brown, G Blair Fritz, and Ryan Johnson. 2018. Mastering VMware VSphere 6.7. John Wiley & Sons."},{"key":"e_1_3_2_1_34_1","unstructured":"MITRE. 2023. Common Weakness Enumeration (CWE). https:\/\/cwe.mitre.org."},{"key":"e_1_3_2_1_35_1","unstructured":"Mobilityhouse. [n. d.]. Mobilityhouse\/OCPP: Python implementation of The open charge point protocol (OCPP). https:\/\/github.com\/mobilityhouse\/ocpp"},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of the International Conference on Research in Adaptive and Convergent Systems. 190--195","author":"Morosan Adrian Gabriel","year":"2017","unstructured":"Adrian Gabriel Morosan and Florin Pop. 2017. Ocpp security-neural network for detecting malicious traffic. In Proceedings of the International Conference on Research in Adaptive and Convergent Systems. 190--195."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"crossref","first-page":"102511","DOI":"10.1016\/j.cose.2021.102511","article-title":"Power jacking your station: In-depth security analysis of electric vehicle charging station management systems","volume":"112","author":"Nasr Tony","year":"2022","unstructured":"Tony Nasr, Sadegh Torabi, Elias Bou-Harb, Claude Fachkha, and Chadi Assi. 2022. Power jacking your station: In-depth security analysis of electric vehicle charging station management systems. Computers & Security 112 (2022), 102511.","journal-title":"Computers & Security"},{"key":"e_1_3_2_1_38_1","volume-title":"ChargePrint: A Framework for Internet-Scale Discovery and Security Analysis of EV Charging Management Systems. In In Proceedings of the Network and Distributed System Security (NDSS) Symposium.","author":"Nasr Tony","year":"2023","unstructured":"Tony Nasr, Sadegh Torabi, Elias Bou-Harb, Claude Fachkha, and Chadi Assi. 2023. ChargePrint: A Framework for Internet-Scale Discovery and Security Analysis of EV Charging Management Systems. In In Proceedings of the Network and Distributed System Security (NDSS) Symposium."},{"key":"e_1_3_2_1_39_1","unstructured":"OPAL-RT. [n. d.]. Hypersim. https:\/\/www.opal-rt.com\/systems-hypersim\/"},{"key":"e_1_3_2_1_40_1","unstructured":"Alvin Powell. 2022. What to expect from California gas-powered car ban. https:\/\/news.harvard.edu\/gazette\/story\/2022\/09\/what-to-expect-from-california-gas-powered-car-ban\/"},{"key":"e_1_3_2_1_41_1","volume-title":"Danial Jafarigiv, Ribal Atallah, Mourad Debbabi, and Chadi Assi.","author":"Sarieddine Khaled","year":"2023","unstructured":"Khaled Sarieddine, Mohammad Ali Sayed, Danial Jafarigiv, Ribal Atallah, Mourad Debbabi, and Chadi Assi. 2023. A Real-Time Cosimulation Testbed for Electric Vehicle Charging and Smart Grid Security. IEEE Security & Privacy (2023)."},{"key":"e_1_3_2_1_42_1","volume-title":"Sadegh Torabi, Ribal Atallah, and Chadi Assi.","author":"Sarieddine Khaled","year":"2022","unstructured":"Khaled Sarieddine, Mohammad Ali Sayed, Sadegh Torabi, Ribal Atallah, and Chadi Assi. 2022. Investigating the security of ev charging mobile applications as an attack surface. ACM Transactions on Cyber-Physical Systems (2022)."},{"key":"e_1_3_2_1_43_1","volume-title":"Sadegh Torabi, Ribal Atallah, and Chadi Assi.","author":"Sarieddine Khaled","year":"2023","unstructured":"Khaled Sarieddine, Mohammad Ali Sayed, Sadegh Torabi, Ribal Atallah, and Chadi Assi. 2023. Edge-Based Detection and Localization of Adversarial Oscillatory Load Attacks Orchestrated By Compromised EV Charging Stations. arXiv preprint arXiv:2302.12890 (2023)."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijepes.2021.107784"},{"key":"e_1_3_2_1_45_1","unstructured":"Burp Suite. [n. d.]. BURP suite - application security testing software. https:\/\/portswigger.net\/burp"},{"key":"e_1_3_2_1_46_1","volume-title":"Electric Grid Test Case Repository. Texas A&M University College of Engineering","author":"Texas A&M University","year":"2023","unstructured":"Texas A&M University. 2023. Electric Grid Test Case Repository. Texas A&M University College of Engineering (2023). https:\/\/electricgrids.engr.tamu.edu\/electric-grid-test-cases\/wscc-9-bus-system\/"},{"key":"e_1_3_2_1_47_1","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Zhou Wei","year":"2019","unstructured":"Wei Zhou, Yan Jia, Yao Yao, Lipeng Zhu, Le Guan, Yuhang Mao, Peng Liu, and Yuqing Zhang. 2019. Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1133--1150. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/zhou"}],"event":{"name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","location":"Singapore Singapore","acronym":"ASIA CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3644999","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:06Z","timestamp":1750290246000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3644999"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":47,"alternative-id":["10.1145\/3634737.3644999","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3644999","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}