Mr McClure said his company's software was taking advantage of the same kind of artificial intelligence that hackers were now using. "The only way to defeat a machine is to use a machine … and there is a lot of wealth in Australia making it a very attractive target," he said. "Artificial intelligence algorithms are algorithms that self learn. They learn to classify the good and the bad and any mutations of malware, spyware, ransomware, whatever." An energetic Californian, McClure sits down at his bulky laptop and pulls up a list of ferocious viruses, freely available to download online. "What's your favourite virus?" he asks seriously. "Australians often get hit with ransomware so let's get one of those." Within minutes, McClure has unleashed a host of attacks on his computer and watches web security blockers McAfee and Sophos fail to capture the string of attacks, which seep through the end-point and infect the computer. "They don't recognise mutations of spyware whereas Cylance can read if it's destructive," he says as he sets up the attack again, this time on CylancePROTECT. Gleefully, he attacks his own security tool and watches the list of blocked viruses grow. The traditional "signature" detection model of enterprise security relies on authenticating the origin of a digital message and giving the receiver a reason to believe a known sender created the message. Mr McClure said signatures quickly become out of date as new mutations of malware develop. "Signatures mean you have to constantly update the product, which is annoying and dangerous for the client. We don't have that, we also don't use the cloud, so you can be completely disconnected." The average cost of a data breach to an Australian business is more than $2.5 million a year, according to Deloitte's cyber intelligence centre, with the average breach involving more than 20,000 records over the five years to 2014.
Cylance claims to be the next generation of anti-virus software, using artificial intelligence and machine learning, instead of virus definition databases and signatures. The proactive software automatically blocks threats before they can execute without any human involvement and it can evolve to different types of viruses without regular software updates. The software can also work on offline devices and can integrate itself into an existing infrastructure. According to McClure, CEO of Cylance, the traditional 'signature' detection model of enterprise security is outdated as the product has to be constantly updated and does not keep up with the constant evolution of cyber viruses.