The invention discloses an analytical hierarchy process-based information security Bayesian network evaluation method. The method mainly comprises the following steps: a problem is made clear, an information security evaluation task is analyzed, an information security evaluation analytical hierarchy process index system is built according to the principle of the analytical hierarchy process, and an information security evaluation analytical hierarchy process model is built; the index system in the analytical hierarchy process model is converted into a network structure of an information security Bayesian network evaluation model, and the network structure is used for expressing each element layer and an incidence relation thereof in the index system; according to each index weight parameter in the analytical hierarchy process model, the conditional probability of nodes in the information security Bayesian network evaluation model is calculated; and on the basis of the Bayesian theorem, inferential analysis is carried out on the information security Bayesian network evaluation model, and hidden dangers and weak steps of information security are found out. Thus, accuracy of the analytical process is improved by using features of Bayesian network inference based on probabilistic uncertainty.