This is rather interesting, apparently the annual cost of corporate malware attacks has been declining over the past couple of years:

Story:

http://home.businesswire.com/portal/...00639&vnsId=41

I guess this is in line with the reported change of emphasis by malware authors from disruptive to commercial gain?

I also suspect that the drop of $4.5 billion is more than made up for by the increase in computer based fraud