Privacy-by-design based on quantitative threat modeling | IEEE Conference Publication | IEEE Xplore