A new quantitative approach for information security risk assessment. - Abbas Asosheh; Bijan Dehmoubed; Amir Khani (ISI, 2009)