Strategic investment in protection in networked systems