The invention discloses a software-defined event trigger control method for a large-scale network system under spoofing attack, which comprises the following steps: firstly, establishing a large-scale network control system model, and then introducing a dynamic weighted centralized event trigger mechanism; considering the influence of spoofing attack on network transmission data, and establishing a network attack model; a large-scale networked system model is improved based on a spoofing attack and dynamic weighted event triggering mechanism; and finally, based on a Lyapunov stability theory, obtaining a sufficiency condition for ensuring that the system is finally consistent and bounded, and obtaining an event trigger parameter and a state estimator gain by solving a linear matrix inequality. According to the method, the problem of management complexity caused by a centralized event triggering mechanism can be effectively reduced, the burden of network transmission is relieved, serious threats of spoofing attacks to a network control system are considered, and the data transmission efficiency is effectively improved.