Method and system of assessing information system suffering from Web attack risk

The invention discloses a method of assessing an information system suffering from a Web attack risk. The method comprises the steps of 1, building an index system of a to-be-assessed object information system which suffers from the Web attack risk in advance and building acceptable objects and an ideal object of the index system; 2, performing quantitative characterization on the to-be-assessed object by utilizing an improved good and bad distance method TOPSIS; extracting main components by utilizing PCA, calculating degrees of closeness between the to-be-assessed object as well as the other two built objects and the positive and negative ideal solutions of the TOPSIS in the presence of the main components, integrating the degrees of closeness in the presence of different main components to obtain weighted degrees of closeness, and obtaining a score of the to-be-analyzed object based on the weighted degree of closeness. Aiming at a single assessment object, the weight of the object can be distributed reason