[link|http://www.theregister.co.uk/content/56/32510.html|Here].

In defending against the worm, the Internet community may have to move towards a new defensive posture. More of the same just won't do.

Virus filtering services from ISPs and managed services firms will become a more attractive alternative, despite the privacy concerns involved in their use. In the short term AV firms can look to a boost in sales from the publicity generated by the Sobig outbreak.

Changes

But Symantec, McAfee, Sophos and the rest would do well to look over their shoulder. Behaviour blocking technology - which is able to stop malicious code executing on the desktop - could supplant AV tools as the first line of defence against viral code. Cisco's acquisition of behaviour blocking firm Okena earlier this year signals that heavyweights are eyeing this market for growth. In this scenario, conventional AV tools would then become file disinfectors - not the first line of defence against malicious code.


It's a good read. Andrew might find some information useful for his [link|http://www.aaxnet.com/editor/edit033.html|Windows Worms] writeup.

Cheers,
Scott.