Abstract:It is unrealistic to detect complicated network attacks based on traditional intrusion detection methods (TIDM) because of the TIDM algorithms emphasis on observing behaviors of independent event, which appears to be lack of the analysis of the interplay among events. The detection method based on relations among sub-events in complicated network attacks has been put forward in this paper. The example shows that method which are designed in this system can effectively detect the attacks.