Vanja Svajcer

Oxford

Virus researcher

My point was that one should not rely only on Anti-virus software. Although in 99% of the cases you can rely on the AV software to detect known malicious threats you have to be constantly vigilant and monitor signs of suspicious activity using complementary technologies in case of an attack with a yet unknown piece of code.

Due to the reactive nature of scanning (initially we need to see a malicious sample in our lab before we release detection) and recent cases of targeted attacks, there is an increased risk of an attacker planting a Trojan without initial detection of the AV software. The risk is quite small, but it exists and I wanted people to be aware of it.

In computer security there are no silver bullet products. The security is a process and not a product and involves multiple technologies, products, policies and most of all people. AV software is just a small piece in the picture.