Abstract: The modeling method of information system survivability analysis based on stochastic Petri net is presented for system survivability design in this paper. First, network information system is divided into request modules, communication modules, processing modules, and storage modules for simplifying the SPN model according to its work flow. Next, formal description of system working flow is combined with survivability analysis modeling, and also described are the SPN modeling method of universal information system model, service disabled models, failure-recovery models，modules redundancy models, and survivability attribute models which include resistance, recognition, recovery and adaptation. Accordingly, Renew is used, which is an efficient SPN tool to exam and then puts forward relevant algorithms and programs which are realized by Java language to make quality and quantity analysis of system survivability. Finally, simulation experiment shows that this approach has more description ability and expansibility than the stochastic process algebra method. When there are some changes in the simulation system, the model can only change its corresponding modules to make a new experimental result. All the experiments prove correctness and effectiveness of the modeling method of information system survivability analysis based on SPN. This survivability analysis model can provide theoretical basis and guide for designing a survivable information system.