@inproceedings{e32480c4eaaf43e1ba3067465b8268fe,
title = "Wicked Problem, Parsimonious Solution: Securing Electric Vehicle Charging Station Software",
abstract = "Electric vehicle charging infrastructure presents a suite of novel cyber-physical threats. Among this infrastructure, charging stations are the most vulnerable elements. The software in the charging station supply equipment is particularly vulnerable. Currently, the software is an attack surface that is largely unprotected and poorly characterized. To represent the vulnerabilities in this attack surface, we advocate for applying modern software quality assurance to characterize vulnerabilities in electric vehicle charging station software. Specifically, we advocate for the application of hierarchical software quality assurance (HSQA) to specialized electric vehicle charging station software. HSQA provides a comprehensive view of the code quality and security - from the level of individual vulnerabilities (e.g., CVEs) to high level characteristics (e.g., CIA Triad). HSQA incorporates quality and security considerations throughout the software development lifecycle. Thus, our position is that HSQA is an excellent approach for assessing electrical vehicle charging station software.",
keywords = "charging station, cyber-physical system, cybersecurity, electric vehicle, power grid, software quality",
author = "Emma Sheppard and Zachary Wadhams and Dalton Arford and Clemente Izurieta and Reinhold, \{Ann Marie\}",
note = "Publisher Copyright: {\textcopyright} 2025 IEEE.; 5th IEEE International Conference on Cyber Security and Resilience, CSR 2025 ; Conference date: 04-08-2025 Through 06-08-2025",
year = "2025",
month = aug,
day = "26",
doi = "10.1109/CSR64739.2025.11130101",
language = "English",
series = "Proceedings of the 2025 IEEE International Conference on Cyber Security and Resilience, CSR 2025",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "679--686",
booktitle = "Proceedings of the 2025 IEEE International Conference on Cyber Security and Resilience, CSR 2025",
}