Detecting and preventing unknown file-based attacks (or zero-day attacks) is challenging, and especially counter-productive.