发表机构
Georgia Institute of Technology（佐治亚理工学院）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本研究通过互联网规模扫描识别超6.6万个暴露的太阳能分布式能源资源，发现至少1万个存在已知漏洞，并利用瓦胡岛电网分析证明攻击者可引发电压和潮流违规，造成电能质量下降乃至停电，揭示了并网DERs的新兴电网风险。
AI 中文摘要
并网太阳能分布式能源资源（DERs），如太阳能逆变器和监控平台，在过去几年中以空前的规模部署，自2022年以来全球太阳能容量翻了一倍多。为了支持监控和控制，许多此类系统都连接到互联网，并由安装商或最终用户配置，然而，它们在现实世界中的互联网暴露规模以及对电网运行的影响仍鲜为人知。在本文中，我们对暴露和脆弱的太阳能DER基础设施进行了互联网规模的评估，并评估了受损DERs可能对能源电网构成的风险。我们开发了一种从互联网扫描数据中准确识别太阳能DERs的方法，并发现了超过66,000个互联网暴露的太阳能DERs的多样化群体。我们检测到其中至少10,000个DERs可能具有已知的CVE，例如未经认证的监控和控制端点。为了评估这些脆弱DERs对电网构成的风险，我们使用了电力系统研究社区建立并使用的夏威夷瓦胡岛电网网络，并进行了电力系统分析。我们的评估表明，通过破坏暴露的DERs，攻击者可以在瓦胡岛网络的多个位置引起电压和线路潮流违规，导致从电能质量下降到电力系统组件损坏再到停电的一系列后果。最终，我们的工作揭示了并网DERs的新兴威胁，并为提高能源安全提供了方向。
英文摘要
Grid-connected solar distributed energy resources (DERs), such as solar inverters and monitoring platforms, have been deployed at unprecedented scale over the past few years, with global solar capacity more than doubling since 2022. To support monitoring and control, many of these systems are Internet-connected and configured by installers or end users, yet the real-world scale of their Internet exposure and the implications for power grid operation remain poorly understood. In this paper, we present an Internet-scale evaluation of exposed and vulnerable solar DER infrastructure, and assess the risk that compromised DERs can pose to energy grids. We develop a method for accurately identifying solar DERs from Internet scanning data, and discover a diverse population of over 66,000 Internet-exposed solar DERs. We detect that at least 10,000 of these DERs may have known CVEs, such as unauthenticated monitoring and control endpoints. To assess the risk that these vulnerable DERs pose to a power grid, we use an electric grid network for Oahu, Hawaii, established and used by the power system research community, and conduct a power system analysis. Our evaluation shows that by compromising exposed DERs, attackers can cause voltage and line flow violations across multiple locations in the Oahu network, resulting in a range of consequences from degraded power quality to damaged power system components to power outages. Ultimately, our work brings to light the emerging threat of grid-connected DERs, and provides directions for improving energy security.
Comments20 pages, 10 Figures, To appear in the Proceedings of the 2026 ACM SIGSAC Conference on Computer and Communications Security (CCS '26)
