The traffic patterns of AI worms may mimic normal device communication, making them difficult to identify through rule matching; their propagation paths span consumer devices, enterprise networks, and cloud services, so isolation requires multi-level coordination; and device resources are too limited to run a full security agent.