The experimental results prove that the intrusion detection method based on Hebb rule can correctly build the network behavior model and detect abnormal behavior in local area network accurately.