Everything contained in here are snippets of code that I have seen or found on the internet, as well as from the fantastic individuals on the MacEnterprise forum.
It is signature based which means it relies on a massive collection of snippets of text and code that researchers have discovered over the years are associated with unwanted network traffic, be it worms, port scans, or intrusions.