At　present,　distributed　systems　have　been　widely　used,　and　a　lot　of　research　has　been　done　on　the　reliability　of　distributed　systems.　However,　trusted　3.0　based　distributed　system　node　trust　behavior　recognition　research　is　still　relatively　rare.　This　paper　focuses　on　the　identification　process　and　evaluation　method　of　distributed　node　trust　behavior.　In　this　paper,　call　links　and　resource　consumption　of　software　behavior　are　obtained　by　burying　points　during　the　development　phase.　Based　on　the　idea　of　＂sense　of　words　and　deeds＂,　this　paper　compares　the　pre-acquired　trust　call　links　with　the　resource　consumption　sample　data,　in　order　to　obtain　a　credible　real-time　software　behavior　model.　This　paper　will　focus　on　the　analysis　and　extend　to　the　distributed　environment,　and　conduct　a　trusted　analysis　of　software　behavior,　which　provides　a　new　idea　for　software　trusted　behavior　analysis.