Using Case-Based Reasoning method to supply chain risk assessment, it successfully solves the problems like how to describe and save cases, how to find matching case, how to adjust the solution, etc.

Firstly,this paper introduces the development of the security of network and information in today s China,analyses the problems and the corresponding solving methods and strategies,then it introduces the risk evaluation of the security of network and information and the quantitative evaluation of threat.