Abstract: A method of intrusion detection, which based meta-information rough-sets theory, is proposed. The sequence of system calls are converted into the subsequences of shorter length, and decision rules for intrusion detection are extracted and induced. Subsequences length and average accuracy values are compared under classification method with default rule. Experiments show that this intrusion detection method can have low false positive and high detection rate.