Network risk analysis method using information hierarchy structure

A network risk analysis method using an information hierarchy structure is provided to store the result of network risk analysis at a database. Network environment information which is the target of risk analysis is stored at a first hierarchy(10), and a result of vulnerability for a network obtained by using a vulnerability checking tool is stored at a fourth hierarchy of the database(40). A risk analysis result of the network is stored at a sixth hierarchy of the database(60). A protection measurement result for the network is stored at a seventh database of the database(70).