The Malware Crisis

Akin to classic thief vs Cops.Thieves are always ahead by one step.
Story:
One way that security vendors have attempted to reassure customers is through third-party lab testing. Antivirus products typically sport a stamp of approval or check mark as validation from one of the major testing bodies. The problem: Traditional testing methodologies that rely on the WildList and the VB100 list are no longer effective. These lists test against worms and viruses in a stagnant environment and are now largely meaningless against new forms of malware. These current testing methods are often based on static lists, and the vast majority of malware is not even included in that list. I first introduced this topic in “Where the Wild Things Aren’t,” but the situation will not be solved overnight and therefore bears repeating so that CIOs don’t have a false sense of security.
http://www.forbes.com/2010/01/31/rsa-conference-cybercrime-technology-cio-network-malware.html?partner=alerts