荷兰研究人员警告：欧洲数千风光电站管理系统暴露于互联网
荷兰研究人员10月6日在海牙ONE网络安全大会上警告，欧洲数千座风电场与光伏电站的管理系统暴露在互联网上，攻击者可能借此访问可关停涡轮机的界面，带来破坏风险。暴露系统包括管理与登录界面，以及显示数据与控制功能的运营界面。
研究者之一、互联网扫描公司Modat的Soufian El Yadmani表示，研究人员认为约181个站点可能被完全控制；一个涡轮机的网页上甚至显示实时数据以及「启动、停止、重置」按钮与位置。部分系统控制多台涡轮机或整个场站。
研究团队与荷兰国家网络安全中心的Bouke van Laethem利用机器学习识别出35个欧洲国家8547个可关联到具体光伏电站（7942个）与风电场（605个）的联网系统，其中以西班牙光伏与德国风电暴露最多；多数为不应联网的管理登录页面。
研究者敦促运营商立即将管理界面下线。相关发现正值欧洲关键基础设施频繁遭遇疑似破坏与网络攻击之际；上月荷兰情报机构、警方与检察机关曾警告人工智能正加速这类威胁。
Dutch Researchers Warn Thousands of European Wind and Solar Systems Are Exposed Online
Dutch researchers warned at the ONE Conference in The Hague on October 6 that thousands of administrative systems at European wind and solar parks are exposed to the internet, potentially giving attackers access to interfaces that can stop turbines and raising sabotage risks. Exposed systems included login interfaces and operational pages showing data and controls.
Soufian El Yadmani of internet-scanning company Modat said researchers believed full control would have been possible at around 181 sites. One turbine's web page showed live data, 'Start, Stop and Reset' buttons and its location; some systems controlled several turbines or a whole farm.
Working with Bouke van Laethem of the Dutch National Cyber Security Centre, the team used machine learning to identify 8,547 internet-facing systems linked to solar parks (7,942) and wind farms (605) in 35 European countries, with Spanish solar and German wind most exposed. Most were admin pages that should not have been online.
The researchers urged operators to take admin interfaces offline immediately. The findings come amid concern over attacks on Europe's critical infrastructure; Dutch intelligence agencies, police and prosecutors warned last month that artificial intelligence is accelerating the threat.
图片来源：图：北海海上风电场。摄影：Capmat007，CC BY-SA 4.0，来源：Wikimedia Commons
