This paper proposed an attack pattern mining algorithm based on improved fuzzy clustering and sequence pattern mining. The method combines the advantage of fuzzy clustering to describe the similarity between security logs and the advantage of sequence pattern to describe the logical relationship in attacking steps. The experimental results show that the algorithm can effectively mine the attack pattern, improve the accuracy and generate more effective attack pattern.