The wide uses of Internet have brought not only convenient network data access but also network attacks. The growing attack has made intrusion detection system become a major concern of information security. This article proposes an implementation of an anomaly detection IDS based on neural network, which is used on FTP service. The main objective of the article is to evaluate the feasibility to build IDS based on data mining technique. The detecting ability of unknown intrusion is also assured.