This work describes the proposal of implementing a Security Risk Analysis Model based on a Bayesian Network built via Ant Colony Optimization. The main advantages of this approach involve the possibilities of relationship analysis between the vulnerabilities, the continuous learning capability through a training database and the possibility of risks re-evaluation when facing new evidences, collected in real time.