工业信息物理系统是智能制造和“工业4.0”的核心，保护其安全至关重要。项目研究云计算环境下工业信息物理系统在遭到网络入侵时，依靠系统自身主动将系统及时恢复到正常工作状态或可接受风险状态的关键技术和实现方法。深入分析工业信息物理系统与云计算融合后的网络结构、运行特点及安全需求，设计主动入侵反应控制框架；结合系统模型和运行数据，利用贝叶斯网和博弈论动态制定多约束条件下的全局最优安全防御策略；研究基于软件定义网络和虚拟化技术的安全防护功能在线重构，实现安全资源灵活调度和安全服务动态编排；提出基于“云-边缘”协同的现场快速入侵反应和基于切换模型的自主弹性安全控制方法，构建现场双闭环实时安全控制结构；搭建测试平台进行仿真实验并开展工程应用。项目解决云计算环境下工业信息物理系统主动入侵反应的关键技术问题，可完善工业信息物理系统安全设计理论，加速云计算与工业的融合，为工业化和信息化的安全发展保驾护航。

Industrial cyber-physical system is the key to intelligent manufacturing and “Industry 4.0”. It is of crucial significance to guarantee its security. This project is proposed to research on the key technologies and implementation methods to proactively and timely recover industrial cyber-physical system to normal operation or acceptable risk level state all by itself when the system is under cyber-attack. To achieve this goal, a proactive intrusion response framework is firstly designed after a thorough investigation into the network structure, operation characteristics and security requirements of cloud-integrated industrial cyber-physical systems. Secondly, Bayesian network and Game theory, combined with system model and running data, will be utilized to dynamically make global optimal defense strategies with multiple constraints. Meanwhile, online security function reconfiguration method will be studied based on software-defined networking and virtualization techniques, which aims to flexibly schedule security resources and dynamically orchestrate security services. Then we intend to propose a “Cloud-Edge” collaborative quick intrusion response method and switching model-based autonomous resilient security control strategy, which forms a double closed-loop real-time security control structure for field control systems. In addition, it is planned to build a testbed for conducting emulation experiments, and also carry out engineering applications. The goal of this project is to solve the critical technological problems of proactive intrusion response in cloud-integrated industrial cyber-physical systems. The results obtained would hopefully improve the security design theory for industrial cyber-physical systems, accelerate the integration of cloud computing and the industry, and secure the evolution of informationization and industrialization.