This is a good write-up on the security-spending surprise.