Economics of Information Security 2004