In order to quantify the industrial control system's information security risk,this paper proposed an attack treebased method for assessing the system's cyber security risk situation. This method first constructed an attack tree,in which the ultimate attack goal presented as the top node and the attack events presented as the leaf nodes. Then it selected three indices for each leaf node and applied the probability risk assessment technology to calculate the probability of occurrence for each node in the att...