if you expect security software to do all the work..

from here

attackers are people. software isn't going to outsmart them. quite the opposite in fact.