Security engineering : risk assessment and security measures