The invention relates to a security risk state analysis method for a sensing layer of an electric power internet of things, which is characterized by comprising the following steps of: step 1, acquiring and storing related information of all terminal equipment in the sensing layer of the electric power internet of things; step 2, acquiring a plurality of equipment state type tags based on the related information, and judging the security risk of the terminal equipment; step 3, acquiring a network flow abnormal condition and a network access abnormal behavior of the terminal equipment based on a pre-generated network flow feature model and a pre-generated network access behavior feature model; and step 4, displaying the equipment state type information, the security risk information, the network flow abnormal condition information and the network access abnormal behavior information obtained in the step 2 and the step 3 in a classified manner by adopting a visualization method. According to the method, the analysis result is comprehensive and accurate, the analysis process is intelligent and rapid, meanwhile, the good visualization effect is achieved, and the safety degree of the system is improved.