针对网络安全风险评估过程中的模糊性问题,在分析了网络安全风险要素的基础上,将模糊判断运用于网络安全风险评估中,利用模糊隶属度理论把定性指标合理的定量化,进而将定性与定量评价相结合,得到了一种综合化程度较高的评价方法.最后以示例来说明模糊评价法的具体应用. Aiming at the fuzziness in the process of network security risk assessment, based on the analysis of the elements of network security risk, the fuzzy judgment is applied to the network security risk assessment. The fuzzy membership degree theory is used to quantify qualitative indicators rationally, In combination with quantitative evaluation, a highly integrated evaluation method is obtained.Finally, an example is given to illustrate the application of fuzzy evaluation method.