A novel role analysis method for network domain users was proposed. Firstly. the algorithm used ISODATA algorithm to cluster network events for user behavior analysis. on the basis of conditions. https://canadabrass.shop/product-category/libarary/