Due to the importance of the industries covered by industrial control systems, such as oil and chemical, electric power, nuclear power plants, water conservancy, transportation, municipal administration, military, high-end manufacturing, etc., its safety issues are becoming more and more important and involve the national economy and people's livelihood. With the introduction of the concept of "industrial 4.0", the state has promulgated a series of policies to promote the upgrading and transformation of industrial industries, and the development of industrial control systems will be further digitized, networked and intelligent. Under such a development trend, for these key information infrastructure, how to carry out safety monitoring and early warning, how to timely and effective prevention in advance, monitoring in the event and traceability after the event are becoming urgent problems in the field of industrial control security. In view of the traditional industrial control safety protection method, Secondary specialized school focus on the single information protection analysis is not comprehensive enough and the accuracy is low; the single security mechanism is easy to be bypassed; the detection is prone to omission, false positives and other problems. In this project, a multi-information fusion industrial control security protection system combining host security monitor and network monitoring early warning device is proposed. The host security monitor innovatively realizes the functions of kernel monitoring and port monitoring by modifying the driver and adding port blacklist, so as to protect the safety of the upper computer in the industrial control system. In addition, a unique programmable logic controller (Programmable Logic Controller , PLC) operating state model, the realization of the PLC state monitoring function, and through data flow analysis, the completion of sensitive instruction detection function, so as to effectively ensure the safety of PLC operation in the industrial control system. Finally, the project through the security monitor and network monitoring early warning device to collect the security information, comprehensive assessment and analysis of the security of the system and detection of industrial control system may exist in the attack, so as to protect the security of the entire industrial control system. In the simulated petrochemical experimental environment, the system can affect the operation efficiency of the industrial control system to a minimum extent, and effectively detect the abnormal state of the upper computer operation, the abnormal state of PLC operation and malicious traffic and other information, and alarm the operator in real time. This also demonstrates that the system can provide a basis for industrial management to make industrial safety construction decisions, and ultimately improve the overall level of industrial safety protection. In the future, during the R & D construction period (2022-2023), we plan to set up and expand the technical R & D team and complete the company registration. The company's development period (2023-2024) to further improve the system's security capabilities to ensure the company's sustainable development. When the company matures (2025-), we will analyze the development prospects of the international market, open up domestic and foreign industrial safety product markets, and then let China's industrial safety protection system go to the world.