Even if it is using cloud computing technology, it still require internet. As a few post earlier said, I think it is something like Threatfire which can detect new threat ... but then threatfire requires update as well ... Not sure how's their 'technology' works ...