NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Cybersecurity for Smart Inverters: Guidelines for Residential and Light Commercial Solar Energy Systems

Published

Author(s)

Jeffrey Marron, Donald Faatz, Daniel Rebori-Carretero, Johnathan Wiltberger, Jim McCarthy, Nic Urlaub

Abstract

This report provides practical cybersecurity guidance for small-scale solar inverter implementations that are typically used in homes and small businesses. These guidelines are informed by a review of known smart inverter vulnerabilities documented in the National Vulnerability Database (NVD), a review of information about known smart inverter cyber-attacks, and testing five example smart inverters. The report also provides recommendations to smart inverter manufacturers on the cybersecurity capabilities needed in their products to implement the seven guidelines. These recommendations build on the Internet of Things (IoT) cybersecurity capability baselines defined in NIST IR 8259A and IR 8259B by providing smart-inverter specific information for some of the baseline cybersecurity capabilities.
Citation
NIST Interagency/Internal Report (NISTIR) - 8498
Report Number
8498
NIST Pub Series
NIST Interagency/Internal Report (NISTIR)
Pub Type
NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8498
Local Download

Keywords

IoT cybersecurity capabilities, light commercial inverter, residential inverter, small-scale solar energy system, smart inverter cybersecurity
Trustworthy platforms, Risk management, Electric power / smart grid and Cybersecurity and privacy

Citation

Marron, J. , Faatz, D. , Rebori-Carretero, D. , Wiltberger, J. , McCarthy, J. and Urlaub, N. (2024), Cybersecurity for Smart Inverters: Guidelines for Residential and Light Commercial Solar Energy Systems, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8498, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=959031 (Accessed October 9, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created December 20, 2024
Was this page helpful?