Abstract: Industrial control system (ICS) is the key part of critical infrastructure. With the development of industrial information, network information technology is widely used in industry. Meantime, the cyber security risk in industry is also growing in intensity. The potential vulnerabilities of ICS were analyzed based on its built-in attributes and application features, and set forth the importance of setting up security test and assess authentication in industry. Finally, the main idea about how to improve the security of ICS is summarized and future work is prospected.