关键词: 工业控制系统, 自主可控, 安全防护体系, 隔离交换产品, 可信计算技术

Abstract: Based on the threats that exist in the ICS network interconnection and communication,host computing environment, centralized management,we introduced an independent decisionmaking and controllability protection system.By designing physical and environmental security, border protection, centralized management, network and communication security, application and data security, the ICS security can be protected comprehensively, and the system is independent decisionmaking and controllability. Also we introduced the application of the independent decisionmaking and controllability product: isolation exchange product. This system is aimed of autonomous controllable ICS security, In the long term, application of trusted computing technology in the ICS is the solution to ICS security.

Key words: industrial control system (ICS), independent decisionmaking and controllability, security protection architecture, isolation exchange products, trusted computing technology