Anti-virus manufacturers are failing to keep up with malware creators, a leading IT security expert argued in a recently published paper.