Skip to content

Exposing the Occultations in Large Off-Grid Solar Systems

Dan BerteAlexandru Lazar

Reveals critical vulnerabilities in solar inverter management platforms that could allow attackers to manipulate power grid infrastructure.

Summary

Solar Energy Management Architecture

Utility-scale and off-grid solar installations depend on cloud-managed smart inverters to monitor power output and regulate grid feed-in parameters.

Critical Vulnerabilities in Management Platforms

Security audits of prominent solar equipment manufacturers uncovered three critical vulnerabilities within cloud management portals and local inverter controller firmware.

Weaponization and Grid Stability Risks

Exploiting these flaws allows unauthorized remote attackers to alter power generation parameters, disconnect solar arrays simultaneously, and destabilize regional electrical grids.

National Security Implications and Defenses

Securing renewable energy infrastructure requires standardizing firmware verification protocols, isolating inverter management networks, and establishing rigorous vendor security oversight.

Related talks

Creator Stage·14 min

  • DEF CON
  • ICS / OT
  • Date: Aug 2024
  • Location: Las Vegas

Bryson Bort · Tom VanNorman

Introduces industrial control systems architecture, the Purdue model, attacker viewpoints, and steps to build a personal ICS research lab.

ics-otcritical-infrastructurearchitecture+2