Everything contained in here are snippets of code that I have seen or found on the internet, as well as from the fantastic individuals on the MacEnterprise forum.
It is signature based which means it relies on a massive collection of snippets of text and code that researchers have discovered over the years are associated with unwanted network traffic, be it worms, port scans, or intrusions.
In recent years, they have found ways to encode trademarks in cells and poetry in bacteria, as well as store snippets of music in the genetic code of micro-organisms.