Aiming at the problem of event classification of on-line network information content security incidents,LDA was introduced,which uses the characteristics that network user’s communication information includes time,relationship and content characters.A real-time multi-dimension information association-LDA (RMIA-LDA) model and algorithm were proposed,which uses the communication time character as timeline,and LDA model to calculate the results of classification of communication relationship and communication content characters in each time slice.After the similarity metric calculation of the classification results and merging them with the results of update data,the result of current on-line events classification was obtained.Experimental results showed that the proposed model and algorithm can achieve the goal of on line information content security incidents classification effectively.It has better performance than the existing algorithms.