ABOUT THE DIN

Antivirus Diminishing Gains: Multi-Engine Scanning in Secure Defence File Transfer Pipelines

Alpha Echo

About the Company

Alpha Echo is a cybersecurity consultancy specialising in Cyberworthiness and Defence consulting. The company takes a holistic, multidisciplinary approach to cybersecurity, drawing on security specialists, intelligence analysts, behavioural scientists, educators and engineers. Alpha Echo is a DISP partner and supplies services across the Australian Defence ecosystem.

Project Objective

Cross-domain secure file transfer pipelines are critical Defence infrastructure enforcing data flow controls between networks of different classification levels. Malware inspection within these pipelines often uses multiple antivirus (AV) engines in the belief that more engines improve detection — but the evidence base is thin. This project will determine whether using multiple AV engines provides meaningful security benefit, or whether detection gains diminish after a certain point. The intern will review prior research, design a controlled evaluation, and compare single-engine and multi-engine scanning configurations against metrics including detection rate, false positives, scan latency, resource use and operational complexity — producing evidence-based recommendations for malware inspection design in sensitive defence environments.

Project Tasks

• Weeks 1–3 (Literature review): Review historical and current research on multi-engine AV scanning and antivirus diversity; produce a short high-level research report.
• Weeks 3–6 (Define research method): Define evaluation metrics; design a controlled methodology for comparing engine counts and combinations. Output: proposal of research method.
• Weeks 6–10 (Deliver findings): Execute the methodology; compare single-engine vs. multi-engine configurations; identify where additional detection benefit becomes marginal; assess disadvantages. Output: research report.
• Weeks 11–12 (Present findings): Develop and deliver an informational brief covering findings and recommendations for AV methods in secure pipelines.

Intern Skills

• Computer science, cybersecurity or statistics — strong knowledge of antivirus products and cybersecurity research methods.
• Linux user space; statistical analysis methods; candidates with both are preferred.
• Strong communicator; able to work independently and collaboratively; adjusts well as scope evolves; approachable; committed to continuing learning.
• Australian citizenship required; Alpha Echo is a DISP partner. AGSVA security clearance preferred but not essential.

How to apply

Eligible students (Australian citizens) apply via the online application form and submit a CV and motivation letter by 6 September 2026.