in the second section of this paper, author introduces relevant research work. Security event correlation analysis method based on the similar degree of attributes, including related functions definitions, algorithm description is in the 3rd section. the simulation experiments and result analysis is in the fourth section. the last section is conclusion, future work prospect