A new quantitative approach for information security risk assessment | IEEE Conference Publication | IEEE Xplore