The invention discloses an alarm data matching method for power information network security linkage defense. Through the method, the problem that final norm category judgment is not accurate is solved. A technical scheme for solving the problem mainly comprises the steps that alarm data is acquired, and keywords in alarm content are extracted from the alarm data; semantic matching is performed onall the keywords in the alarm content and keywords in norm categories, and the keywords successful in semantic matching in the alarm content are acquired; weight values corresponding to the keywordssuccessful in semantic matching are calculated; and matching degrees between the keywords successful in semantic matching in the alarm content and the keywords in the norm categories are calculated according to the weight values, and the norm category corresponding to the highest matching degree is used as a final norm category.