Search papers, labs, and topics across Lattice.
This paper introduces a market-analysis-driven methodology for scalable cybersecurity assessment of EV charging stations at a national level. By identifying operator-manufacturer pairs, the approach enables targeted field testing and extrapolation of security control support across a large charging infrastructure. Applied to Germany, the study reveals that only 27.4% of CCS charging stations utilize TLS-protected communication, despite its widespread availability.
Despite widespread theoretical support, a surprisingly low 27% of German EV charging stations actually use TLS encryption, exposing a significant cybersecurity vulnerability.
Modern charging communication standards for electric vehicles include optional security controls such as TLS-based authentication and encryption. However, with tens of thousands of fast charging points deployed in any given country, individually testing each one for security control support is infeasible. This paper proposes a scalable, extrapolation-based methodology for assessing charging station cybersecurity at a national level. A market analysis identifies operator-manufacturer pairs, enabling the targeted selection of charging stations for field testing, whose results can then be extrapolated to all stations sharing the same combination. We demonstrate this methodology for Germany, covering over 40000 CCS charging points as of December 2025. With a manageable number of field tests, our extrapolated data examines 51.9\% of german CCS charging stations. It shows that only 27.4\% of charging stations in our scope provide TLS-protected communication, despite widespread theoretical support.
