Cybersecurity in Photovoltaic Plant Operations

Abstract

Department of Energy (DOE) reports produced after 1991 and a growing number of pre-1991 documents are available free via www.OSTI.gov.

Cybersecurity Vulnerabilities in Smart Grids with Solar Photovoltaic: A Threat Modelling and Risk Assessment Approach

“…In a study conducted by Walker et al (2021) that specifically examined cybersecurity in PV operations, notable challenges were identified, including a shortage of personnel with cybersecurity expertise and inadequate cyber hygiene practices. To address these concerns, the study proposed comprehensive plans that encompassed the expanded threat landscape, emphasized training programs for staff, and recommended implementing certifications for security systems as proactive measures to mitigate these risks.…”

Gap Analysis of Supply Chain Cybersecurity for Distributed Energy Resources

“…Cybersecurity has an important impact on many aspects of the supply chain, from firmware arranged on chips, to software packages used at various points in the software development cycle. Equipment or software that has been compromised in the supply chain upstream of the ultimate owner-operator might lead to attacks, such as stealing or rerouting funds; denial of service; breaching confidential or proprietary information from a company, its customers, or its suppliers; ransomware that denies the operation of automated equipment for payment; and malicious control actions that could damage equipment and endanger personnel (Walker et al 2021). One key area that that needs cybersecurity recommendations and guidance is the security of firmware and programmable logic controllers.…”

“…Many standards exist to inform increases in cybersecurity postures and to protect against cyberattacks. The current landscape of recommendations and standards includes several that can be used by DER utilities, vendors, aggregators, or manufacturers (Walker et al 2021): Although this is not a complete list, these are recommended standards to assess and implement for DER cybersecurity. Idaho National Laboratory posted the standards to a secure energy infrastructure website that allows an organization to select the filters that match their own organizational structure, the purpose of the standard they are looking for, as well as the type.…”

“…In the context of supply chain cybersecurity, the resources that directly influence this ecosystem include software, hardware, data, and/or other digital components. Compromised equipment or software in the supply chain could lead to attacks, such as financial loss; denial of service; breaching confidential or proprietary information from a company, its customers, or its suppliers; ransomware that denies the operation of automated equipment for payment; and malicious control actions that could damage equipment and endanger personnel (Walker et al 2021).…”

Cybersecurity of photovoltaic systems: challenges, threats, and mitigation strategies: a short survey

“…example is the 2015 cyberattack on Ukraine's power grid, where hackers targeted control systems, triggering widespread outages affecting approximately 225,000 customers (Zetter, 2016). Similarly, a 2019 attack on a US utility impacted PV and wind installations due to an unpatched firewall breach, temporarily disrupting Supervisory Control and Data Acquisition (SCADA) systems and 500 MW of generation (Walker et al, 2021). These incidents emphasize the urgent need for robust cybersecurity measures in PV systems to avert future threats, underlining power grid vulnerability and potential repercussions of cyberattacks on vital systems.…”