Of Threats and Costs: A Game-Theoretic Approach to Security Risk Management