Cost-effective Cyber Security