Abstract: A concept of global network privilege graph and its generation method were proposed. Then a novel network risk assessment model based on privilege graph was proposed. The algorithm and model were verified using a demonstrative network. The results show that the assessment achieved by the model is more exact than common methods because the model considers the quantitative data of vulnerabilities and other security configuration information.