Abstract: Information system has been used in every walk of life and its security has nearly been noticed. The risk evaluation which can analyze the current status and potential risk of information system provide gist and direction for later security programming, m

Key words: Risk evaluation, Modularization, Hiberarehy