Security Profile for Advanced Metering Infrastructure - Open Smart ...

DHS-2.8.4.2 Supplemental Guidance:
Control of information system remnants, sometimes referred to as object reuse, or data
remnants, must prevent information, including cryptographically protected
representations of information previously produced by the AMI system, from being
available to any current user/role/process that obtains access to a shared system resource
(e.g., registers, main memory, secondary storage) after that resource has been released
back to the information system. Such information must be cleared before freeing the
resource for other use.
DHS-2.8.4.3 Requirement Enhancements:
None.
DHS-2.8.4.4 Rationale:
The purpose of this control is to ensure that information that requires a given privilege
level for access is not exposed to individuals or processes with a lower privilege level.
Implementing this control provides assurance that information security requirements are
being met. DHS-2.8.5 Denial-of-Service Protection
DHS-2.8.5/ NIST SP 800-53 SC-5 Denial-of-Service Protection
DHS-2.8.5.1 Requirement:
AMI components shall protect against or limit the effects of denial-of-service attacks.
DHS-2.8.5.2 Supplemental Guidance:
A variety of technologies exist to limit, or in some cases, eliminate the effects of denialof-service
attacks. For example, network perimeter devices can filter certain types of
packets to protect devices on an organization’s internal network from being directly
affected by denial-of-service attacks.
DHS-2.8.5.3 Requirement Enhancements:
1. The AMI system must restrict the ability of internal or external users to launch
denial-of-service attacks against other AMI components or networks.
2. The AMI system must manage excess capacity, bandwidth, or other redundancy
to limit the effects of information flooding types of denial-of-service attacks.
3. Wireless assets and networks are also vulnerable to radio-frequency jamming and
steps must be taken and personnel trained to address tracking and resolution of
such issues. This may include radio-frequency direction finding and other such
technologies.
Security Profile for Advanced Metering Infrastructure Version 1.0
UtiliSec Working Group (UCAIug) December 10, 2009
27