Skip to content

README.md

Latest commit

 

History

History
143 lines (112 loc) · 4.12 KB

README.md

File metadata and controls

143 lines (112 loc) · 4.12 KB
Raw

EVCS MITM Attack Simulation

A project to simulate and mitigate Man-in-the-Middle (MITM) attacks in Electric Vehicle Charging Station (EVCS) environments.

Team Members

  • Raul Lopez
  • Nico Sicat
  • Enoch Elumba

Project Overview

This project simulates the communication between an Electric Vehicle Charging Station (EVCS) and a Charging Station Management System (CSMS), along with tools to demonstrate MITM attacks and security implementations.

Directory Structure

EVCS-Simulation/
├── CSMS.py              # Charging Station Management System
├── CSMS_enc.py          # Encrypted version of CSMS (Diffie-Hellman + AES)
├── EVCS.py              # Electric Vehicle Charging Station
├── EVSE_enc.py          # Encrypted version of EVCS (Diffie-Hellman + AES)
├── TCSMS.py             # Test CSMS implementation (TLS)
├── TEVCS.py             # Test EVCS implementation (TLS)
├── requirements.txt     # Python dependencies
├── setup.sh            # Setup script
├── MITM_attack.md      # MITM attack documentation
├── encryption.md       # Encryption documentation

Prerequisites

  1. Python 3.10
  2. Three Virtual Machines:
    • VM1: Debian (CSMS)
    • VM2: Debian (EVSE)
    • VM3: Kali Linux (Attacker)
  3. Ettercap (pre-installed on Kali Linux)

Installing Ettercap

Ettercap should be pre-installed on Kali Linux. If not, install it using:

sudo apt update
sudo apt install ettercap-graphical -y

Setup Instructions

  1. Clone the repository:
git clone [repository-url]
cd EVCS-Simulation
  1. Install Python dependencies:
pip install -r requirements.txt
  1. Run the setup script:
chmod +x setup.sh
./setup.sh

Virtual Machine Configuration

VM Setup Requirements

  1. CSMS VM (Debian):

    • Install Debian OS
    • Run CSMS.py or encrypted versions
    • Configure network settings

  2. EVSE VM (Debian):

    • Install Debian OS
    • Run EVCS.py or encrypted versions
    • Configure network settings

  3. Attacker VM (Kali Linux):

    • Install Kali Linux
    • Ensure Ettercap is installed
    • Configure for network monitoring

Network Configuration

  1. CSMS VM:

    • Modify self.host in CSMS.py to "0.0.0.0" to accept connections from any IP

  2. EVSE VM:

    • Modify self.host in EVCS.py to point to CSMS VM's IP address

Encryption Methods

Method 1: TLS-Based Encryption (TCSMS.py and TEVCS.py)

This implementation uses Transport Layer Security (TLS) with SSH tunneling for MITM protection.

Key Features:

  • Certificate-based authentication
  • TLS encryption
  • SSH tunneling for ARP spoofing mitigation
  • Error handling mechanisms

Benefits:

  • Secure communication with certificate verification
  • Protection against MITM attacks through SSH tunneling
  • Data integrity and authenticity verification
  • ARP spoofing mitigation in OSI Layer 2

Method 2: Diffie-Hellman with AES (CSMS_enc.py and EVSE_enc.py)

This implementation uses Diffie-Hellman key exchange with AES encryption for secure communication.

Key Features:

  • Diffie-Hellman key exchange for secure key sharing
  • AES encryption for data protection
  • Secure key exchange without direct transmission
  • Implementation using cryptography.hazmat.primitives

Benefits:

  • Secure key exchange without transmitting the actual key
  • Strong encryption through AES
  • Protection against unauthorized access
  • Data confidentiality and integrity

Running the Simulation

  1. Start the CSMS (choose one version):
python3 CSMS.py          # Basic version
python3 CSMS_enc.py      # Diffie-Hellman + AES version
python3 TCSMS.py         # TLS version
  1. Start the EVCS (choose corresponding version):
python3 EVCS.py          # Basic version
python3 EVSE_enc.py      # Diffie-Hellman + AES version
python3 TEVCS.py         # TLS version

Documentation

  • See MITM_attack.md for detailed MITM attack setup and execution
  • See encryption.md for encryption implementation details

Security Notice

This project is for educational purposes only. Do not use these attack demonstrations on production systems or without proper authorization.