The purpose of this report is to provide utilities implementing Advanced Metering Infrastructure (AMI) with the knowledge necessary to secure that implementation appropriately. We intend that utilities use this report to guide their planning, procurement, roll-out, and assessment of the security of Advanced Metering Infrastructure.
This report discusses threats to the AMI, the likely sources of threat, damage mechanisms, and attack consequences. A high-level assessment of risk due to AMI exploitation is given. The report concludes with an outline strategy and specific recommendations for reducing risk. A utility implementing the recommendations contained in this report as it installs AMI technology will be positioned to detect and withstand attacks that attempt to exploit the vulnerabilities of the AMI.