Bit2Watt Attack Exposes AI Data Centers to Power Grid Threats

• •Bit2Watt attack can destabilize power grids using malicious GPU workloads.
• •1,000 GPUs can create significant power distortion, risking infrastructure damage.
• •Urgent need for improved cybersecurity defenses in AI data center operations.

Cybersecurity researchers from Zhejiang University have introduced a new attack method called Bit2Watt, which exploits GPU workloads in AI data centers to destabilize local power grids. This attack allows malicious cloud tenants to manipulate GPU workloads, potentially causing blackouts or damaging infrastructure. The researchers demonstrated that an attack using 1,000 GPUs could induce a total harmonic distortion of 46.8%, significantly affecting power consumption and generating excessive heat. The findings highlight the urgent need for enhanced cybersecurity measures in workload scheduling to protect critical infrastructure. The attack method leverages the known challenges of power fluctuations during AI training, which can resonate with critical frequencies of electrical systems. The implications of this attack are severe, as it turns data centers into potential threats to power grid stability.