Constrained Automata: A formal tool for ICT risk assessment