Abstract: Different characteristics between industrial control system(ICS) and traditional IT information system are discussed, and information security risks faced by ICS are analyzed. A corresponding security protection system is proposed from both technology and management aspects. On technical side, it is suggested to employ measures including firewall protection, isolation of engineer stations, system security testing and network monitoring. On managerial side, it is recommended to maintain and update management systems and security technology standards in real time. The proposed security protection system has already been verified by industrial control computer security protection pilot projects in electrical company. The project demonstrates its feasibility and provides reference to IPC security protection in power grid.

Key words: industrial control system (ICS), information system, information security, network attack, protection system for power grid