On Quantification for SOTIF Validation of Automated Driving Systems