The invention provides a method and device for determining a key node of a network attack graph of a power information physical system. The method comprises the following steps: obtaining at least onecharacteristic value of all nodes in the attack graph; respectively determining the weights of the characteristic values; and determining the key node from all nodes according to the at least one characteristic value and the weights.