Conventional risk assessment frameworks usually define risk as a function of vulnerabilities and threats, but they frequently lack a single quantitative model that incorporates the unique features of each element. In order to close this gap, this paper creates a flexible, open, and theoretically...