A formal approach for secured risk analysis in information security management | IEEE Conference Publication | IEEE Xplore