Quantitive risk analysis