On the basis of the current single layer Markov chain anomaly detection model, this paper proposes a new two-layer model.

• 在现有的单层马尔科夫链异常检测模型基础上；提出一种崭新的两层模型.