Risk modeling and measurement