Abstract: Based on the analysis of software and hardware of network environment and mechanism of attacks，a security risk analysis framework based on network environment attributes is proposed.The set of environment elements is obtained after analyzing the software and hardware.The probabilities of risks that environment elements may induce are analyzed with two circumstances，which are reference model and real monitor data.By mapping the environment elements and consequences，the risk severe induced by environment elements is analyzed.The risk probabilities and severe induced by related environment risk and security elements are investigated with security boundary.Experiments show that with the framework，network security risk analysis can be implemented systematically.

Key words: network environment attributes, security risk analysis, Analytic Hierarchy Process（AHP）

摘要： 通过对网络环境中软硬件条件以及网络攻击机理的分析，提出了一种基于网络环境属性的安全风险分析框架。从软硬件条件的分析中得到环境因素集合；从参考模型和实际监测数据两种情况分析了环境因素引发风险的可能性；通过环境因素与风险后果的映射，分析了环境因素引发不同后果的风险严重性；并从安全边界的角度分析了具有关联性的环境风险和安全子因素所引发风险的可能性和严重性。通过实例说明，该框架能够系统化地分析网络安全风险。

关键词: 网络环境属性, 安全风险分析, 层次分析