Application of analytic hierarchy process in upstream risk assessment and project evaluations