The invention discloses an attack-oriented electric power industrial control system service self-recovery method and system, and the method comprises the steps: receiving comparison information sent by equipment in a site range according to a backup equipment operation state and file change content increment, generating a recovery strategy, and sending the recovery strategy to corresponding equipment, and carrying out the site function self-recovery; Matching the power flow data with regional system configuration parameters one by one, and analyzing the regional system power loss to obtain a power loss region after confirming that all nodes of the regional system are matched; Determining a coordinated scheduling strategy of the power flow in the regional system according to the power lossregion, generating a global recovery control command, and sending the global recovery control command to a global station and equipment to perform regional system service function self-recovery. According to the method, after the power industrial control system is attacked, real-time, efficient and comprehensive self-recovery of power services can be achieved, and system loss caused by attacks isreduced to the maximum extent.