信息安全风险评估是信息系统安全工程的重要组成部分,也是建立信息安全保障体系的基础。本文依据信息安全风险评估的脆弱性分析要求,从设备自身的工作原理、外在因素等方面分析网络互连设备的脆弱性,着重从其工作原理分析存在的脆弱性。 Information security risk assessment is an important part of information system security engineering and also the basis for establishing information security assurance system. According to the vulnerability analysis requirements of information security risk assessment, this paper analyzes the vulnerability of network interconnection equipment from its own working principle and external factors, and focuses on the analysis of the existing vulnerability from its working principle.