BSides Vancouver 2015 - Wesley Wineberg - Analyzing the EMU-2 Zigbee Home Energy Monitor

Electromagnetic Hypersensitivity and You - Analyzing the EMU-2 Zigbee Home Energy Monitor Now that Smart Meters have been deployed in the majority of large cities in North America, the opportunity to access real-time metering data is available to many consumers. In BC, BC Hydro has approved two devices which can be used by a consumer to communicate with their smart meter using the Zigbee communications protocol. This talk will focus on one of those devices, the EMU-2 Home Energy Monitor. As with any wireless protocol, proper security measures are very important due to the ease at which an attacker may be able to intercept or inject communications. This talk will detail the security mechanisms used by the Zigbee Smart Energy standard, and show how those are implemented by the EMU-2 device, as well as the BC Hydro metering system. In addition to examining Zigbee communications, this talk will also explore the security of the EMU-2 device itself, both from a software and hardware perspective. The techniques demonstrated can be used against many other types of embedded devices, with the analysis of the EMU-2 being shown as an example.