Which one of the following is NOT mentioned in the passage about the new approach
A．It can define groups of malware that operate in similar ways.
B．It can keep track of different variants of existing viruses.
C．It can link different pieces of malware that behave in the same way.
D．It could reduce the number of updates needed for conventional AV systems.