The security solution I swear by is manifold: It starts with the concept of tweaking my machine so that it is as unique as possible. Most security attacks are based on common, standard configurations as well as using well known products, which are the focus of the attackers' efforts. I am not a security expert, just a layman who reads a lot (CodeProjects' Daily News is indispensable) and experiments with various products. I am also a firm believer in having as much control over my machine as possible and prefer a click or two more with the mouse over allowing all programms to automatically do updates (some I trust), execute programms and other things behind the scenes. I am also required to go as cheap as possible. I don't use Adobe Reader, and IE only as a backup. My browser's default configuration is with JavaScript and all plugins disabled (ToggleFlash for IE, http://flash.melameth.com/[^]). Immunization of Browsers using Spybot Search and Destroy (http://www.safer-networking.org/[^]). Firefox and IE users should also checkout Spyware Blaster (http://www.javacoolsoftware.com/spywareblaster.html[^]). Comodo is my Firewall of choice (http://www.comodo.com/[^]). I only use the firewall, the Antivirus scanner catches and deletes Programms I trust (NirSoft as an example) and all realtime scanners I've tried use more resources than I prefer to sacrifice. USB sticks are not a problem, for those I use the following registry hack:

Windows Registry Editor Version 5.00

;Disable parsing of autorun.inf files
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:DoesNotExist"

I have also innoculated my machine and all my USB sticks and external hard drives using Flash Disinfector (http://download.bleepingcomputer.com/sUBs/Flash_Disinfector.exe[^]) becau

Have you looked into Function Point Analysis? Check International Function Point User Group [IFPUG94] Also take a look at CoCoMo II Methode (Constructive Cost Model II).