Text this: Research on quantitative assessment model on vulnerability risk for information system