This paper* suggests the use of information hierarchy-based network risk analysis method. This method displays each step's result on corresponding layer and superposes those results into one map. Using this multi-layer approach makes it possible to define the relationship among the results and analyze the results with case and effect. By using the collected network information, a network map can be generated. On this network map, the other layers' data can be superposed and displayed. So we name this Network Security Map(NSM). NSM can show the current status of network security, so it can help the more effective risk analysis.