Security needs to move away from the traditional approach of chasing after arbitrary forms of malware.