Sure you can explore the solution space in software to identify candidates but at some point you have to create a live virus and see how it actually performs.