Fuente: Wipo "BigData" The invention relates to a network security analysis method and system applied to smart medical big data. The method comprises the following steps: determining a multi-modal remote medical session containing a target medical service theme and a target remote medical session; according to the technical thought of carrying out abnormal tendency analysis on the session event according to the multi-modal remote medical session and the target remote medical session, the accuracy and reliability of abnormal tendency analysis can be improved; according to the technical thought of carrying out network attack preference mining on the target medical service theme according to the multi-mode remote medical session and the target remote medical session, the quality of network attack preference mining can be guaranteed, and the method can be matched with various smart medical network security protection conditions as much as possible. According to the method, a high-accuracy and high-reliability abnormal tendency analysis result and a network attack preference mining result can also be obtained for a large-scale smart medical network security protection condition, targeted behavior interception of a session event is guaranteed, and smart medical big data is prevented from being threatened by intrusion attacks and the like.