Abstract: A planning exploit graph model that can be used in information security risk process was proposed. The domain and problem of risk process was described in PDDL language, and the system information, vulnerabilities, threats and defenders were modeled based

Key words: Risk process, Planning exploit graph model, PDDL, Planning