"Traditional anti-virus has become a flimsy protective layer vis a vis prevention of infection due to the massive increase in unique code from prevalent bots such as Storm, or under the radar from targeted trojans. Post-infection detections present a huge challenge for corporations (though most probably still don't understand what the ramifications are) due to the nature of current threats. It is currently rarely possible to say whether personal or corporate data has been compromised as a result of an infection. Vendors cannot keep up on the behaviour of what is detected, yet we need to be able to tell our end users whether there was a possibility of data ransoming or identity theft. While most vendors have recently introduced behavioural analysis platforms, there has been relative silence as to how well they meld into a managed enterprise, or how well they actually perform. What is more troubling is that vendors probably have end user feed-back in implementing such systems. There is probably no question that a platform change must occur, but defining how this can be seamless for organizations that implement such is paramount. "