关键词: 工业控制系统（ICS）, Conpot系统, 安全, 深度防御

Abstract: Industrial Control System（ICS） as the core of the national infrastructure control equipment, the security affects national economy and people’s livelihood. After the Stuxnet virus outbreak, it gradually attracts national, business and strategic security people attention. This paper analyzes the structure and assets, vulnerability, threats, security countermeasures and risk assessment five aspects of industrial control system. It provides a four-levels-function security management model which imitates the immune system, and then elaborates the defense in depth, firewall, abnormal examination, Conpot, secure remote access and management strategy. The paper points out that ICS security will become the greatest opportunity and challenge to the smart city, smart manufacturing, industrial 4.0 and other emerging technologies. Finally, according to the domestic industrial security plan, it makes recommendations for industrial security and looks forward ICS security prospects.

Key words: Industrial Control System（ICS）, Control Systems Honeypot（Conpot）, security, defense-in-depth