Keywords information system;information security risk management;exploit graph;risk event process modeling;fuzzy NCIC method security decision making;fuzzy multi-objective optimization;

• 信息系统;信息安全风险管理;利用图;风险事件建模;模糊NCIC方法;安全决策;模糊多目标优化;