Abstract: Vulnerability assessment is an important aspect of information system security risk assessment process. Combined with AHP（Analytic Hierarchy Process）, we provide a quantitative vulnerability assessment method of information system.

Key words: Vulnerability, Information system, Analytic hierarchy process