Measuring the information security risk in an infrastructure | IEEE Conference Publication | IEEE Xplore