SecureState releases smart-meter hacking tool, claims world first

SecureState, a management consulting firm specializing in information security, has released what it claims is the world’s first tool that allows users to assess the security of smart utility meters over an optical interface.

SecureState (Cleveland, USA) had previously sent a “lite” version of the tool, branded Termineter, to a select group of registrants, but the full open-source code allows individuals to manipulate and test the security of smart meters with full functionality.

SecureState, a management consulting firm specializing in information security, has released what it claims is the world’s first tool that allows users to assess the security of smart utility meters over an optical interface.

SecureState (Cleveland, USA) had previously sent a “lite” version of the tool, branded Termineter, to a select group of registrants, but the full open-source code allows individuals to manipulate and test the security of smart meters with full functionality.

Spencer McIntyre, of the SecureState research and innovation team, is to perform the first live public demonstration of Termineter on July 25th, during a presentation at the Security B-Sides event in Las Vegas.

SecureState claims the goal of the public release is to promote smart-meter security and provide a tool that brings basic testing capabilities to the community. Power companies, for example, should be able to use Termineter to identify internal flaws that leave them susceptible to fraud. SecureState says that users will need to have general knowledge of the meter’s internal workings in order to use Termineter proficiently.

The Termineter framework uses the ANSI C12.18 and ANSI C12.19 standards to allow users to interact with and view information on a device using the optical port. SecureState says that neither Termineter nor the modules contained within it carry any vendor-specific information and that Termineter was designed largely on the basis of ANSI standards available in the public domain.