I see what you are saying. I think the value of the swarm here is the rapidly adaptive nature of the system when there are so many agents. I don't really know w

I see what you are saying. I think the value of the swarm here is the rapidly adaptive nature of the system when there are so many agents. I don't really know what the overhead is for this approach compared to a normal virus scanner. I looked around on the Wake Forest CS site trying to find a paper describing their approach but I didn't come up with much except for a more detailed article and a list of publications by the researcher. http://www.wfu.edu/wowf/2009/20090921.ants.html http://www.wfu.edu/wowf/2009/20090921.ants.html http://www.cs.wfu.edu/~fulp/ewfpub.html#securityPublications http://www.cs.wfu.edu/~fulp/ewfpub.html#securityPublications I imagine that the grad students mentioned in the article will be documenting this research as part of their theses. I am interested to see what they have to say, my company has looked at similar ideas in intrusion detection a little in the past. EDIT: I found this paper at the PNNL site: http://www.pnl.gov/main/publications/external/technical_reports/PNNL-17868.pdf http://www.pnl.gov/main/publications/external/technical_repo...