It's a false positive that just detects the global keyboard hook that SFML uses when you use sf::Keyboard::isKeyPressed(). You can report it to Norton and hope they mark it as false positive. Alternatively, you might consider just using events instead of sf::Keyboard::isKeyPressed() to handle input.
