My own estimate is that there are about 10, 000 white hat security researchers working full time to counter malware (100 vendors X 50 average and double that for independents.) I am still working on an estimate of the number arrayed on the other side of this battle ground.
FORBES: Battleground Cyberspace: Hackers vs. White Hats