Security Profile for Advanced Metering Infrastructure - Open Smart ...

DHS-2.8.2 Management Port Partitioning
DHS-2.8.2.1 Requirement:
AMI components must isolate telemetry/data acquisition services from management
services.
DHS-2.8.2.2 Supplemental Guidance:
Separation may be accomplished by using different computers, different central
processing units, different instances of the operating systems, different network addresses
or protocol ports (e.g., TCP ports), combinations of these methods, or other methods as
appropriate. Such precautions reduce the risk of allowing access to a data acquisition
server and can help limit the damage of a compromised system.
Configuration and testing ports for AMI components should be disabled when not in use.
Depending on the criticality of the system it may be advised that a device be physically
disconnected.
Such precautions reduce the risk of allowing access to a data acquisition server and can
help limit the damage of a compromised system. Configuration and testing ports for AMI
components should be disabled when not in use.
Depending on the criticality of the system it may be advised that a device be physically
disconnected.
DHS-2.8.2.3 Requirement Enhancements:
The AMI system management service must be physically or logically separated from
telemetry/data acquisition services and information storage and management services
(e.g., database management) of the system.
DHS-2.8.2.4 Rationale:
The security requirements for access to configuration/management services on a given
AMI component are greater than those required for access to telemetry/data acquisition
services. Without isolation, the communication channel for access to the telemetry/data
acquisition services has the potential to be leveraged to gain access to the management
services. This leveraging can occur through a vulnerability in implementation, poor
configuration, or other means. Ensuring separation between services limits the impact of
a vulnerability in a service with lower security requirements being leveraged to access a
service with higher security requirements.
DHS-2.8.3 Security Function Isolation
DHS-2.8.3.1 Requirement:
AMI components must isolate security functions from non-security functions.
Security Profile for Advanced Metering Infrastructure Version 1.0
UtiliSec Working Group (UCAIug) December 10, 2009
25