A Risk Based Approach for Security Assurance Evaluation of IT Systems | IEEE Conference Publication | IEEE Xplore