HIV research - from wester to easter ... ?

We take security very seriously on this project and I drive my management crazy making sure we take care of any and all potential security concerns. The last thing we would need in a philanthropic project like this is a black eye due to some security problem.While I know, as a computer scientist, that it is almost impossible to guarantee 100% security, I must say that the agent software used for World Community Grid is probably the most secure piece of software you have on your PC (counting Windows, the standard applications, browser, device drivers, etc.). If I were a hacker, and knowing what I know, the World Community Grid agent would be my least promising avenue for attacking a machine.The software we are currently using has been audited in various ways for vulnerabilities and we employ ethical hackers to see if there are any problems that we should address either with the agent or our servers. While on one hand I don't like the idea of publishing a lot of detailed security information which might make the novice users unjustifiably nervous, I am planning on writing a security overview to be placed somewhere on our web site, because the question does come up often in various meetings.

We use an encrypted communication link between client and server. The communication link is established by the client, never by the server. The server is secured by IBM. No security is perfect, but in practice this means that spam or viruses have to come from somewhere else.