A method to detect hosts security based on users behavior habits is presented in this paper.A extended attack tree model which uses attack trees root to represent the host is built to research the influence of users behavior habits to the host
its also used to describe the hosts security.The method realizes an intelligence assessment of hosts security for different hosts
and provides a new direction for detect hosts security weight.