The invention discloses a cyberspace situation awareness method and device based on the sine cosine algorithm (SCA). The method comprises the following steps: adjusting thresholds and weights of an Elman neural network through the SCA; carrying out optimization on the Elman neural network, so that a time sequence of network traffic samples, a time sequence of network traffic longitudes and latitudes, and a time sequence of network traffic flowing directions are acquired; and carrying out aggregation and normalization processing on the time sequence of the network traffic samples, the time sequence of the network traffic longitudes and latitudes, and the time sequence of the network traffic flowing directions, so that an attack tendency and a situation flowing direction of network traffics are acquired. Through the method, a flowing situation of the network traffics can be acquired.