The invention provides an intelligent electricity network attack detection method based on physical system and information network abnormal data merging. The intelligent electricity network attack detection method comprises the following steps that (1) at a physical layer, the abnormal degree of electric power data of each node is calculated on the basis of the electric power monitoring data in an intelligent electricity network; (2) at an information layer, an invasion detection system is utilized for monitoring the communication flow rate, warning events aiming at the abnormal communication flow rate are generated, and the abnormal degree of network communication of each node of the system is calculated; (3) the electric power data of each node is correlated with the abnormal degree of the network communication on the basis of an ID-IP (identity- internet protocol) mapping table of the node, and whether each node is attacked or not is judged. The intelligent electricity network attack detection method has the advantages that by aiming at the characteristics that the physical layer and the information layer of the intelligent electricity network are tightly correlated, the traditional electricity network abnormal data detection method is effectively combined with the attack detection method in the information system, and the detection precision of the attack detection in the intelligent electricity network can be obviously improved.