As the number of electric vehicles grows, transport and energy are becoming ever more closely linked. This not only opens up new opportunities but also creates vulnerabilities. Researchers at Hong Kong Polytechnic University (PolyU) have described a new type of cyberattack that exploits this link.
Instead of hacking the well-protected networks of energy companies, an attacker only needs to influence the navigation systems used for charging electric vehicles. If a large number of cars are redirected to a single station, demand for electricity will spike sharply within a short time. This could lead to local outages or reduce the reliability of the power grid.
Most cyberattacks on energy systems require penetrating closed dedicated communication networks - this is difficult and expensive. Navigation services for drivers, however, are far less well protected, making them a more accessible entry point. An attack can begin outside the distribution network and then, through the behavior of electric vehicle owners, reach critical infrastructure.
The study was led by Professor Bu Siqi, deputy head of the Department of Electrical and Electronic Engineering at PolyU. The scientists studied the risks that arise when cyber-physical transport systems (CPTS) and cyber-physical power systems (CPPS) are combined. CPTS are transport systems with built-in communication networks for traffic monitoring, routing and mobility management. CPPS are power systems with the same kind of networks for reliable control of electricity generation, transmission and distribution. Their integration creates new opportunities, but also new vulnerabilities.
The team showed that a sparse vector attack on charging price and traffic flow data allows attackers to influence the system's decisions. In such an attack, a small number of specially selected false data points are introduced into the system. The results were published in the journal IEEE Transactions on Transportation Electrification.
"This study shows how a cyberattack that begins in one system can spread to another. By demonstrating the destructive potential of cross-system attacks, we want to raise public awareness and encourage stronger protection measures," the press service quoted Bu Siqi as saying.
In addition to describing the attack mechanism itself, the scientists proposed specific countermeasures. These include enhanced monitoring of anomalous price and traffic signals, more reliable protection of communication channels and early detection of unusual recommendation patterns in electric vehicle charging navigators.
The work also provides insight into how to improve the resilience of combined energy and transport systems. "As electric vehicles become more popular, the link between transport and energy will only grow stronger, and cybersecurity will become even more important. Our research contributes to creating a safer charging environment and supports the spread of electric vehicles in Hong Kong, mainland China and around the world," Bu Siqi added.