2026-10-12T21:17:32Z https://api.figshare.com/v2/oai

oai:figshare.com:article/32963705 2026-10-01T09:02:42Z category_28924 item_type_6 month_year_10_2026

Telemetry Falsification by Compromised Sources in OCPP-Based EV Charging InfrastructureSource Files, Logs and Data (SQL DB and CSV Files), Reproducibility Instructions Antonios Ntib (23818711) Panagiotis Katrakazas (24378923) Napoleon V. Stefanopoulos (24378883) Nabeel Ahmad Khan Jadoon (23823826) Marc-Oliver Pahl (15216055) Lars Rehmann (1416205) Cybersecurity and privacy not elsewhere classified reproducibility archive demand response anomaly detection Smart Grid Security electric vehicle supply equipment CSMS data integrity telemetry falsification EV charging OCPP protocol vulnerabilities <p dir="ltr">This is the reproducibility package for the study on telemetry falsification by compromised sources in OCPP 2.0.1 based electric-vehicle charging infrastructure. It contains the source code, pinned dependencies, setup and run instructions, and the recorded result data and logs used to produce the paper's findings. The testbed models a compromised in-station reporting component that injects falsified values into a charging station's own power-meter path. The station (EVerest, running a Software-in-the-Loop OCPP 2.0.1 simulation) then emits the falsified readings as genuine, authenticated OCPP MeterValues to the management system (CSMS). No man-in-the-middle interception or forged certificate is required. A genuine three-phase 16 A session (about 11 kW) is reported by the unvalidated CSMS as roughly 160 A per phase (about 110 kW from the reported current, about 106 kW on the station gauge) after a factor-ten amplification, and the same falsification succeeds over an encrypted, validated TLS session (OCPP Security Profile 2). The package also includes a site energy management scenario, in which an attenuated report causes the automated curtailment decision to fail and the true draw to exceed the connection-point limit, and an analysis of a stealthy within-bounds adversary against a CUSUM change detector. The package additionally provides pure-Python analytical scripts that reproduce the paper's tables and detection-coverage figures without requiring the full charging-station stack.</p><p><br></p><p dir="ltr"><b>Contents</b></p><ul><li>Source code. The custom CSMS with the four-stage validator, site energy management, and TLS support, the in-station meter falsifier, a leaked-credential OCPP impersonation demonstration, Node-RED based access-vector demonstrations, an MQTT-to-panel bridge, the analytical model, the detection harness, and a web dashboard.</li><li>requirements.txt. Pinned Python dependencies (Python 3.12).</li><li>instructions_v3.pdf. Full setup and run instructions, including how to obtain and build EVerest.</li><li>data/. Recorded results, including MeterValue logs (baseline, defended, TLS, and leaked-credential runs), site energy-management decision logs, and the dashboard SQLite database.</li><li>logs/. Raw run logs per source component.</li><li>certs_tls/. Demonstration TLS certificates for reproducing Security Profile 2.</li></ul><p dir="ltr"><b>Environment</b></p><ul><li>Operating system Ubuntu 24.04.</li><li>Python 3.12, with dependencies pinned in requirements.txt.</li><li>Docker, for the MQTT broker (eclipse-mosquitto).</li><li>Charging station EVerest (everest-core). EVerest is not included in this package. It is available at <a href="https://github.com/EVerest/everest-core" target="_blank">https://github.com/EVerest/everest-core</a>.</li><li>Log files are captured experimental evidence and are provided unmodified.</li></ul><p dir="ltr"><br></p><p dir="ltr">Please mind that ocpp_backend.db and bridge.log due to their large file sizes, these files are not located in the appropriate subfolders due to an issue with the uploading process in Figshare. However this will not affect the reproducibility process</p> 2026-10-01T09:02:42Z Text Journal contribution 10.6084/m9.figshare.32963705.v3 https://figshare.com/articles/journal_contribution/Telemetry_Falsification_by_Compromised_Sources_in_OCPP-Based_EV_Charging_InfrastructureSource_Files_Logs_and_Data_SQL_DB_and_CSV_Files_Reproducibility_Instructions/32963705 CC BY 4.0