
DEF CON 32 - Pick Your Poison: Navigating a secure clean energy transition - Emma Stewart
Source: YouTube · DEFCONConference · published Oct 16, 2024 · 30:44
The U.S. power grid is transitioning to renewable energy, but this shift has created serious security vulnerabilities due to overreliance on Chinese-manufactured components, particularly in inverters and energy storage systems. While renewable energy is essential for climate goals, the current supply chain lacks diversity, transparency, and security—making the grid susceptible to cyberattacks, supply chain disruptions, and physical failures like battery fires.
• The U.S. now relies on 95–100% Chinese-made digital components in its power grid infrastructure, including inverters and batteries 5:30.
• A major security concern emerged when a U.S. military base installed a battery from a Chinese manufacturer, prompting a nationwide panic over security risks and leading to calls for replacement 7:00-7:30.
• Despite bans on companies like Huawei, the market has shifted, with Chinese firms rising to global leadership in inverter manufacturing, and no viable domestic alternative yet 11:04-11:28.
• Current policy efforts, such as banning specific companies or requiring "rip and replace," are ineffective due to massive costs, lack of funding, and the risk of simply shifting to unregulated alternatives 22:13-23:24.
We are caught between the need for clean energy and the risks of a fragile, insecure supply chain. Without policy reforms—such as mandatory vulnerability disclosure, stronger contract requirements, and clear regulatory oversight—we will continue to face both cyber and physical threats while failing to build a resilient, secure grid.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hi everybody um thanks for joining me today oh that was loud I'm sorry thanks for joining me today um my name is Emma Stewart I'm a chief power grid scientist at Idaho National Laboratory um I've spent about the last 20 years working on power grid nerd stuff effectively um I've done everything from uh essentially working on poles and wires about 20 something years ago up to now where I like to be called doctor and it's kind of cool but um I uh do all sorts of things I worked as a chief scientist for 900 utilities I um I built a cyber program for um a lot of the small rural co-ops in the country but um the last few years I've been working mostly on renewable security and that's what I'm going to talk about today so just very briefly um I'll start here we are in the middle of various differe…