A major risk to security is the emergence of server-side polymorphism or "Crimeware as a Service", in which a polymorphic malware engine does not reside within the virus code itself, but rather remotely on a server.