Trend Micro 'in the cloud' technology

Agree, problem with security is that it tries to keep a static excutable footprint, while most user would like it dynamic.

In this context OA's new feature is good, allow an unknow application to start, but cage it in a limited user environment, so it can do no harm. Also policy sandboxes liek GeSWall and DefenseWall are a great add-on for non XP Professional or non Vista business, they realise LUA + SRP real easy without technical knowledge plus the advantage that downloaed files are also kept in LUA environment.

ALthough both approaches are good, your are left with your pants down when installing new software or Gaming software (like Punkbuster) which puts deliberate holes in your defense. An old blacklist or blacklist combined with behavior analysis (e.g. ThreatFire) provides some protection in these 'open the gate' situations.