IT budgets will not increase despite a predicted growth in the number of attacks in 2009.