 It's looking at different system states. It's looking at logs. It's looking at different kinds of network traffic. Looking for a malicious needle in a haystack. And Avi Rubin with Johns Hopkins says to do that, the security software needs to be deeply embedded in computers' operating systems. And ironically, that means that if something goes wrong, they're vulnerable to having even more serious problems than other types of software.