摘要：通过融合信息物理系统特征，创新工控系统动态重构与可信增强技术，构建多层次多维度深度防御体系，实现内生安全的主动防御。本报告主要研究ICS脆弱性分析与威胁态势感知技术、动态防护主动防御技术、安全增强技术及控制装备研制与安全测评方法与标准；构建结合功能安全、信息安全、操作安全，覆盖ICS管理层、监控层、控制层、器件（部件）层，贯穿控制工程的设计、运行、服务等全生命周期，全面保障ICS的安全性、可靠性、实时性、可用性的主动防御内生安全的核心技术体系；研制相关组件、工具与控制装备；形成ICS深度安全防护整体解决方案。

Abstract：By integrating the characteristics of cyber-physical systems, innovative the dynamic reconfiguration and credible enhancement technology of industrial control system and construct a multi-layer and multi-dimensional deep defense system to achieve active defense of endogenous security. Research mainly focused on ICS vulnerability analysis and threat situation awareness technology, dynamic protection active defense technology, enhanced safety technology, and control equipment development and security assessment methods and standards. Building combination of functional security, information security, operation security, and cover ICS management layer, monitoring layer, control layer, device (component) layer. Through the entire life cycle of control engineering design, operation, service, etc., and comprehensively guarantee the security, reliability, real-time, availability of ICS, the core of proactive endogenous security technical system. Develop related components, tools and control equipment, and form an overall solution for ICS deep security protection.

key words: Industrial control system security; Dynamic defense; Enhanced safety