Modeling worm propagation in the advanced metering infrastructure

Abstract

A computer worm is malicious software that can spread rapidly between interconnected devices and perform malicious actions. In an Advanced Metering Infrastructure (AMI), smart meters may communicate in an ad-hoc fashion to perform many functionalities like remote metering and demand response. However, the AMI is susceptible to cyber-physical threats caused by malware like worms. The speed at which worms propagate in the AMI affects the physical consequences of cyber attacks. In this paper, worm propagation in the AMI is simulated and a probabilistic model is derived. This model can be used to estimate the time required to infect N meters in the AMI and accordingly predict possible physical consequences.