The optimal detection of intrusion node information in the network can guarantee the safe and stable operation of the network. When the intrusion node information is detected, it is necessary to obtain the optimal parameters of SVM according to the optimal acquisition path of the node to complete the detection of intrusion node information. The traditional method uses the ant colony to find the network node path, get the support vector machine parameters, but ignores the optimization of the parameters, resulting in the information detection results are not accurate. An improved detection method of intrusion node information based on attribute attack graph is proposed. The intrusion signal with intrusion node information is decomposed into IMF single frequency intrusion signal, and the state transition equation of the network intrusion detection system is obtained. The ant colony theory and the support vector machine parameters are merged, and the network intrusion check rate is used as the objective function, and the ant is changed to the ant, and the nodes on the optimal path are connected to get the SVM optimal parameters. Based on this parameter, the intrusion node information detection is completed. The experimental results show that the proposed method has high accuracy and can improve the accuracy of embedded computer network intrusion detection.