In recent years, cyber attacks have changed from ransomware to IoT botnet, from exploits to APT attacks, from malicious ads to phishing scams. In this context, the anti-virus industry continues to respond to these cybercrime through machine learning, active defense, linkage defense, threat intelligence sharing and other technical means, and many measures are still taking place, but still face severe challenges.