Application of multi-attribute decision-making methods based on normal random variables in supply chain risk management