Abstract: Embodiments relate to a system, program product, and method for use with an intelligent computer platform and cognitive processing. The embodiments support a mechanism for employing machine learning into dynamically processing a file. File data points are converted to vector form and augmented with similar or synonymous terms. The vector representations of the data points are utilized to identify words and their frequencies, and the identified frequencies are extrapolated and applied to the synonymous terms. As communications are received, the ML model converts the communication to vector form, and compares a feature vector of the communication with data point or file feature vectors to identify and map the communication to a similarly classified file.

Abstract: A method for parallelization of a numeric optimizer includes detecting an initialization of a numeric optimization process of a given function. The method computes a vector-distance between an input vector and a first neighbor vector of a set of neighbor vectors. The method predicts, using the computed vector-distance, a subset of the set of neighbor vectors. The method pre-computes, in a parallel processing system, a set of evaluation values in parallel, each evaluation value corresponding to one of the subset of the set of neighbor vectors. The method detects a computation request from the numeric optimization process, the computation request involving at least one of the set of evaluation values. The method supplies, in response to receiving the computation request, and without performing a computation of the computation request, a parallelly pre-computed evaluation value from the set of evaluation values to the numeric optimization process.

Abstract: A semiconductor device is described. The semiconductor device includes a dielectric layer oriented substantially parallelly to a substrate. The semiconductor device includes a metal layer formed on top of the dielectric layer. The semiconductor device includes a fin extending substantially orthogonally from the substrate through the dielectric layer into the metal layer. The semiconductor device includes a gate insulator deposited on top of the fins and the dielectric layer. The semiconductor device includes an optical projection lithography (OPL) material deposited on a portion of a surface area of the device to form a first covered surface area and a first exposed surface area. The semiconductor device includes a first exposed gate insulator area formed by removing the metal layer under the first exposed surface area. The semiconductor device includes a first exposed fin area formed by removing the gate insulator from the first exposed gate insulator area.

Abstract: A technique to establish a secure session to a network-accessible application from a mobile device executing a native app. Initially, the network-accessible application is provisioned for access by an enterprise associating a set of one or more of its enterprise users with the network-accessible application. Thereafter, access to the application is enabled via an identity provider. In operation, the identity provider receives a request to validate that an enterprise user seeking access to the network-accessible application is associated with the application. The request is generated by the application in response to a login request initiated from the native app from a mobile device, wherein a certificate for the application is not available to the native app.

Abstract: A method for preventing data loss in a RAID includes monitoring storage drives making up a RAID. The method individually tests a storage drive of the RAID by subjecting the storage drive to a stress workload test. This stress workload test may be designed to place additional stress on the storage drive while refraining from adding stress to other storage drives in the RAID. In the event the storage drive fails the stress workload test (e.g., the storage drive cannot adequately handle the additional workload or generates errors in response to the additional workload), the method replaces the storage drive with a spare storage drive and rebuilds the RAID. In certain embodiments, the method tests the storage drive with greater frequency as the age of the storage drive increases. A corresponding system and computer program product are also disclosed.

Abstract: A computer program product for implementing write procedures using an estimated best setting in a first run, the computer program product comprising a computer readable storage medium having program instructions executable by a tape drive to cause the tape drive to perform a method comprising: receiving, at the tape drive, a request for a write operation to be performed in the tape drive; determining, by the tape drive, a capacity margin ratio of the tape drive; determining an optimum a write procedure based at least in part on the capacity margin ratio; and invoking the optimum write procedure in response to determining the optimum write procedure. The optimum write procedure is selected from the group consisting of: a backhitch write procedure, a same wrap backhitchless flush (SWBF) write procedure, and a recursively accumulating backhitchless flush (RABF) write procedure.

Abstract: Optimization of user experience in an interactive environment is disclosed. User experience input is generated by a user during a session of interaction. A user perception on an interaction is determined based on analyzing the user experience input by use of a cognitive model of user perception. For a negative user perception, one or more difficulty of respective items in the interaction is adjusted to match a skill level of the user.

Abstract: A method, computer system, and a computer program product for detecting a minimum viable display resolution is provided. The present invention may include measuring a first quality indicator of a received video file in an original resolution of the received video file. The present invention may then include measuring a second quality indicator of the received video file in a newest resolution of the received video file, wherein the newest resolution of the received video file is a lower resolution relative to the original resolution of the received video file. The present invention may further include, in response to determining that the measured second quality indicator of the newest resolution does not meet a threshold associated with the measured first quality indicator of the original resolution, discarding the newest resolution of the received video file and storing at least one viable display resolution of the received video file.

Abstract: A material comprises a carbon nanotube and a methyl methacrylate group covalently bonded to a surface of the carbon nanotube. In some examples, the material can further comprise a polymeric chain appended to the surface of the carbon nanotube via the methyl methacrylate group. In some examples, the polymeric chain can include styrene monomer repeating units and butadiene monomer repeating units. In some examples, the polymeric chain can include a flame retardant moiety appended thereon and/or flame retardant monomer repeating units. In some examples, the carbon nanotube can be incorporated or combined with a resin material to provide a composite component. A method to produce a carbon nanotube having a polymeric chain appended thereto is also described.

Abstract: Provided is a method for forming a semiconductor structure. In embodiments of the invention, the method includes laterally forming a spacer on a side of the semiconductor structure. The method further includes performing a thermal anneal on the semiconductor structure. The method further includes performing an etch to remove materials formed by the thermal anneal.

Abstract: Address translation of a base address prior to receiving a storage reference to use the address. A determination is made that an address has been obtained that is to be used as a base address for a memory location at which one or more in-memory configuration state registers are stored. Based on the determining, the address is translated into another address, and the translating is performed prior to receiving a storage reference to use the base address.

Abstract: A method for integrating a thin film microbattery with electronic circuitry includes forming a release layer over a handler, forming a thin film microbattery over the release layer of the handler, removing the thin film microbattery from the handler, depositing the thin film microbattery on an interposer, forming electronic circuitry on the interposer, and sealing the thin film microbattery and the electronic circuitry to create individual microbattery modules.

Abstract: In a data processing system, a processor creating level qualifying logic within instrumentation of a hardware description language (HDL) simulation model of a design. The level qualifying logic is configured to generate a first event of a first type for a first simulation level and to generate a second event of second type for a second simulation level. The processor simulates the design utilizing the HDL simulation model, where the simulation includes generating the first event of the first type responsive to the simulating being performed at the first simulation level and generating the second event of the second type responsive to the simulating being performed at the second simulation level. Responsive to the simulating, the processor records, within data storage, at least one occurrence of an event from a set including the first event and the second event.

Abstract: Core utilization optimization by dividing computational blocks across neurosynaptic cores is provided. In some embodiments, a neural network description describing a neural network is read. The neural network comprises a plurality of functional units on a plurality of cores. A functional unit is selected from the plurality of functional units. The functional unit is divided into a plurality of subunits. The plurality of subunits are connected to the neural network in place of the functional unit. The plurality of functional units and the plurality of subunits are reallocated between the plurality of cores. One or more unused cores are removed from the plurality of cores. An optimized neural network description is written based on the reallocation.

Abstract: A method, system and computer program of managing an access right to at least one asset associated with at least one digital work order, or to at least one element associated with the asset, and provides a system and a computer program for the same. The method includes the steps of: loading a security policy associated with the work order, the asset, or the element; starting to monitor location information of the asset or the element and a moving object, or a elapsed time of the moving object at the location; and issuing an event for managing the asset, the element or the moving object in response to the start of the work order or in response to the fact that the loaded security policy is violated by any of the locations, a change in the location, or the elapsed time at the location obtained by the monitoring.

Abstract: Disclosed aspects relate to charge management of a device. A first location-modification event of the device may be detected by a charge management engine. The first location-modification event of the device may indicate a first movement event of the device from an original location to a target location. A device charge pattern may be determined based on a set of profile data for a user. The device charge pattern may include a set of criteria that indicates to charge the device. Achievement of the set of criteria may be identified by the charge management engine based on the device charge pattern. Achievement of the set of criteria may relate to the first location-modification event. An indication to charge the device may be provided by the charge management engine. A charge may be received by the device.

Abstract: A computer-implemented method according to one embodiment includes identifying an entity to be filled in within a selected plurality of video frames, determining a three-dimensional (3D) model for the entity, and filling in the entity within the selected plurality of video frames, utilizing the 3D model.

Abstract: A tunable resistance device and methods of forming the same include a magnetic fixed layer having a fixed magnetization, a magnetic free layer, and a non-magnetic conductive layer directly between the magnetic fixed layer and the magnetic free layer. The magnetic fixed layer, the magnetic free layer, and the non-magnetic conductive layer are formed in a lattice of wires, with each wire in the lattice being formed from a stack of the magnetic fixed layer, the magnetic free layer, and the non-magnetic conductive layer.

Abstract: As disclosed, f-scores can be generated for apparel items. Training images are identified, where each training image is associated with a corresponding set of tags including information about a plurality of attributes. A first convolutional neural network (CNN) is trained based on the plurality of training images and a first attribute. The first CNN is iteratively refined by, for each respective attribute, removing a set of neurons from the first CNN and retraining the first CNN based on the training images and the respective attribute. Upon determining that the first CNN has been trained based on each of the attributes, one or more CNNs are generated based on the first CNN. An image is received, where the image depicts an apparel item. The image is processed using the one or more CNNs, and an f-score for the apparel item is determined based on the output.

Abstract: Aspects include a computer-implemented method includes receiving an instruction at a processor, the instruction associated with a memory block having an address, and accessing a state indicator by the processor. The state indicator indicates whether the memory block is in a pre-defined state, and the state indicator is accessible by the processor independent of the memory block. The method also includes, based on the state indicator indicating that the memory block is in the pre-defined state, inspecting a subset of data values in the memory block, and identifying the pre-defined state of the memory block based on the subset of data values.

Abstract: An electro-optical module assembly is provided that includes a flexible substrate having a first surface and a second surface opposite the first surface, wherein the flexible substrate contains an opening located therein that extends from the first surface to the second surface. An optical component is located on the second surface of the flexible substrate and is positioned to have a surface exposed by the opening. At least one electronic component is located on a first portion of the first surface of the flexible substrate, and at least one micro-energy source is located on a second portion of the first surface of the flexible substrate.

Abstract: An apparatus for shared compare lanes for dependency wakeup in a double issue queue includes a source dependency module that determines a number of source dependencies for two instructions to be paired in a row of a double issue queue of a processor. A source dependency includes an unavailable status of a dependent source for data required by the two instructions where the data is produced by another instruction. The apparatus includes a pairing determination module that writes each of the two instructions into a separate row of the double issue queue in response to the source dependency module determining that the number of source dependencies is greater than a source dependency maximum and pairs the two instructions in one row of the double issue queue in response to the source dependency module determining that the number of source dependencies is less than or equal to the source dependency maximum.

Abstract: Corruption of program stacks is detected by using guard words placed in the program stacks. A called routine executing on a processor checks a guard word in a stack of a calling routine. The checking determines whether the guard word has an expected value. Based on determining the guard word has an unexpected value, an indication of corruption of the stack is provided. Some routines, however, may not support use of guard words. Thus, routines that are interlinked may have differing protection capabilities. A determination is made as to the differing protection capabilities, an indication of the same is provided, and the routines are executed without failing due to the differing protection capabilities.

Abstract: System, method, and computer program product to perform an operation comprising determining that a sort sequence of a query specifying to access data in a first column of a shared weight object based on a first selection predicate applied to the first column does not match a sort sequence of the shared weight object, adding a second selection predicate to the query based on the sort sequence of the first selection predicate and the shared weight sort sequence of the first column of the shared weight object, and executing the query by using the second selection predicate as a key selection against the first column in the shared weight object to return a result set, wherein the result set does not include a shared weight data value of a first row of the first column that would have been returned using the shared weight object to process the query.

Abstract: A computer system may generate acoustical recommendations for a user. A set of actual acoustical data input may be received and compared with a set of expected acoustical data accessed from memory. The set of actual and expected acoustical data may be corresponding. A set of actual acoustical data vectors may be generated and analyzed against a set of expected acoustical vectors. Deviating portions between the actual and expected may be determined and a set of performance rating vectors may be generated based on each deviating portion. Based on these vectors, and by applying the performance rating vectors to a list of reference ratings, the system can generate a set of acoustical recommendations.

Abstract: Security system devices are configured to retrieve historic first sensor data acquired from a protected area in response to receiving a threat alarm notification from a peer security system that is related to an area monitored by the peer security system, wherein the protected area is different from and geographically separate from the area monitored by the peer security system. The system devise determines that a security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as a function of a relation of the threat alarm notification from the peer security system to the protected area, wherein assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area results in determining that the security threat is not indicated for the protected area.

Abstract: According to one aspect of the present disclosure a method and technique for managing data transfer includes receiving and storing a plurality of different data patterns anticipated to be encountered by a processor unit of a data processing system corresponding to a particular application being processed. Responsive to receiving a read request for data, the requested data is read from a memory subsystem, and the read data is compared by the memory subsystem to the stored data patterns. Responsive to determining that the read data matches at least one of the stored data patterns, the memory subsystem replaces the matching read data with a pattern tag corresponding to the matching data pattern. The pattern tag is transmitted to the processor unit instead of the requested data as a response to the read request, and the processor unit replaces the pattern tag with the corresponding data pattern.

Abstract: The illustrative embodiments provide for a computer-implemented method of allocating, in real time, actions to individuals based on text monitored in chat channels executing on different computers in a computer network. A desired action mentioned in the chat session is detected. Action to vector modeling is then performed by assigning a corresponding coefficient for the action to ones of a plurality of different vectors for ones of a plurality of different users. A corresponding set of coefficients is combined for all users. A highest coefficient is selected, corresponding to a second user from among the ones of the plurality of different users. A message is sent to the second user requesting the second user to perform the action.

Abstract: An approach to provide an electronic assembly process that includes receiving at least one electronic assembly after a solder reflow process using a Sn-containing solder and a water-soluble flux. The approach includes baking the at least one electronic assembly in an oxygen containing environment and, then cleaning the at least one electronic assembly in an aqueous cleaning process.

Abstract: A semiconductor device is fabricated with a first layer of a first sacrificial material deposited over a surface of a substrate. A first set of layers of a second sacrificial material and a second set of layers of a channel material are deposited over the first layer. A liner is deposited in a first recess, which exposes a first connection end of a layer in the second set, where the first recess reaches into the substrate for at least a fraction of a total depth of the substrate. An insulator material is filled in the first recess and etched up to a stop depth, stopping the etching at a height above the surface of the substrate. The liner is removed from at least the first connection end of the layer in the second set. An electrical connection is formed with a source/drain structure using the first connection end.

Abstract: Embodiments include method, systems and computer program products for file management. Aspects include monitoring a device to determine an execution of a new process on the device. Based at least in part on the new process starting, a file system is monitored for the creation of a new file, wherein the new file includes one or more file characteristics. The one or more file characteristics are compared to a knowledge database to determine a file type for the new file and the new file is associated with the new process based at least in part on determining the file type for the new file.

Abstract: A storage drive array with available storage space for user data with storage capacity in the array allocated to distributed spare space. The distributed spare space spreads portions of a spare drive across multiple storage drives in the array. By monitoring the amount of spare space available in the array, a determination may be whether the amount of spare space falls below a threshold number of drives. If there is un-used space in the available storage space which is greater than one drive of space, a drive of space to spare space may be dynamically re-allocated in a distributed pattern across the drives of the array.

Abstract: Rack-mountable assemblies are provided which include a cover configured to fixedly mount to a frame of an electronics rack, and a drawer configured to slidably mount to the frame adjacent to the cover to slide relative to the cover. When operatively mounted to the frame, the cover and drawer together define an enclosure for one or more electronic components. The assembly further includes an electromagnetic shielding structure to provide, at least in part, electromagnetic shielding at a gap between the cover and drawer when operatively positioned within the electronics rack. The electromagnetic shielding structure includes an electromagnetic shielding plate which overlies, at least in part, the gap between the cover and the drawer, and which self-adjusts with sliding of the drawer into the electronics rack to facilitate providing the electromagnetic shielding at the gap between the cover and the drawer.

Abstract: A method for execution by a compaction management system includes determining observed compaction information based on compaction observed in at least one storage device during an observed timeframe. An estimated compaction rate is generated for a first future timeframe based on the observed compaction information. An updated ingest rate is generated for the first future timeframe based on a current ingest rate and the estimated compaction rate. A first proper subset of a set of data to be written to the at least one storage device is generated based on the updated ingest rate. Storage of the first proper subset in the at least one storage device is facilitated during the first future timeframe. Storage of a remaining proper subset of the set of data in an elastic buffer is facilitated during the first future timeframe, where the elastic buffer utilizes a memory of the compaction management system.

Abstract: One or more processors scan a first software container template for one or more identities of software present on a first software container associated with the first software container template. One or more processors generate a map of the one or more identities of software present on the first software container. The one or more identities of software present on the first software container are mapped with one or both of: an identifier of the first software container template and an identifier of the first software container associated with the first software container template.

Abstract: A system comprises a display unit; an input device configured to receive user input; and a processing unit communicatively coupled to the display unit and the input device. The processing unit is configured to cause the display unit to display a plurality of lines of natural language text on the display unit together with corresponding annotations including a plurality of relation lines. The processing unit is further configured to adjust spacing between each of the plurality of lines of natural language text based on the corresponding annotations.

Abstract: A blast furnace control system may include a hardware processor that generates a deep learning based predictive model for forecasting hot metal temperature, where the actual measured HMT data is only available sparsely, and for example, measured at irregular interval of time. HMT data points may be imputed by interpolating the HMT measurement data. HMT gradients are computed and a model is generated to learn a relationship between state variables and the HTM gradients. HMT may be forecasted for a time point, in which no measured HMT data is available. The forecasted HMT may be transmitted to a controller coupled to a blast furnace, to trigger a control action to control a manufacturing process occurring in the blast furnace.

Abstract: A method, system and computer program product for finding groups of potential duplicates in attribute values. Each attribute value of the attribute values is converted to a respective set of bigrams. All bigrams present in the attribute values may be determined. Bigrams present in the attribute values may be represented as bits. This may result in a bitmap representing the presence of the bigrams in the attribute values. The attribute values may be grouped using bitwise operations on the bitmap, where each group includes attribute values that are determined based on pairwise bigram-based similarity scores. The pairwise bigram-based similarity score reflects the number of common bigrams between two attribute values.

Abstract: Aspects include a computer-implemented method that includes receiving an instruction at a processor, the instruction associated with a memory block having an address, and accessing a state indicator by the processor. The state indicator indicates whether the memory block is in a pre-defined state, and the state indicator is accessible by the processor independent of the memory block. The method also includes, based on the state indicator indicating that the memory block is in the pre-defined state, inspecting a subset of data values in the memory block, and identifying the pre-defined state of the memory block based on the subset of data values.

Abstract: A method for modification of search subjects in a set of predictive search terms in which a set of search terms from a user is received and communicated to a search engine. One or more sets of predictive search terms from the search engine based on the set of search terms is received from the search engine and one or more search subjects within the one or more sets of predictive search terms is identified. A plurality of set of predictive search terms, where the one or more search subjects are displayed differently from other displayed terms is displayed and the user is presented with an option to modify the one or more search subjects. A modified search subject is received and a modified search sentence comprising the set of search terms, and one or more of the predictive search terms and the modified search subject is displayed.

Abstract: A fine grained negative wordline scheme for SRAM memories is disclosed. The scheme includes a circuit having a static random access memory (SRAM) cell including at least a wordline coupled to a plurality of NFETs of a transistor array. The circuit further includes a wordline driver including a plurality of inverters coupled between a wordline group decode node, a power supply and the wordline. Overvoltage on the wordline driver and NFETs of the SRAM cell are eliminated by applying a power gating mode and lowering the power supply voltage.

Abstract: A streams analysis tool allows a user to define one or more buckets according to a specified tuple collection criteria for each bucket. The specified tuple collection criteria for each bucket defines some way to distinguish one data tuple from another. The specified tuple collection criteria for each bucket is therefore used to distinguish data tuples that satisfy the specified tuple collection criteria from data tuples that do not satisfy the specified tuple collection criteria. When a data tuple satisfies the specified tuple collection criteria for a bucket, the data tuple is stored in the bucket. In addition, data tuples preceding or succeeding the data tuple may also be stored in the bucket, as determined by the specified tuple collection criteria. The data tuples in each bucket are analyzed, and based on the analysis a streams manager can change how future data tuples are processed by the streaming application.

Abstract: Systems and methods for controlling displayed content utilizing stylus rotation are disclosed. In embodiments, a method comprises: displaying, by a computing device, a first portion of user selected content; detecting, by the computing device, rotation of a stylus; and displaying, by the computing device, a second portion of the user selected content based on the rotation of the stylus and user access rules, wherein the second portion comprises more or less content than the first portion.

Abstract: Apparatus for pattern-based migration of a source workload to a target workload at a target deployment which includes a discovery engine, a decision system, a deployment manager, a pattern deployment engine and a residual migration and remediation system. The discovery engine takes the source deployment as an input and discovers metadata associated with the deployed components of the source workload and the IT topology. The deployment manager in cooperation with the pattern deployment engine at the target determines a closest starting-point template to be used for pattern-based target workload deployment. The decision system receives the metadata from the discovery engine and in cooperation with the deployment manager makes a go or no-go decision whether to trigger pattern-based target workload. The residual migration and remediation system finds any undiscovered source workload components and deploys the undiscovered workload components to the target deployment by an image-based migration.

Abstract: A method and system. A computer iteratively processes a unique condition digest of at least two condition digests in each iteration of a loop for a sufficient number of iterations to process all condition digests of the at least two condition digests. The processing in each iteration includes concatenating a reference digest with the unique condition digest of the iteration to generate a concatenand and hashing the concatenand to generate a hashed concatenand that serves as the reference digest for the next iteration if the next iteration is performed. Each unique condition digest is a different condition digest in each iteration of the loop. The regenerated reference digest of the last iteration of the loop is a last digest.

Abstract: The performance of a computer performing electronic design analysis is improved by representing a putative circuit design as a set of movable blocks of predetermined size which must fit into a bounding box (said blocks include a plurality of subsets to be interconnected by wires) and initially placing the set of blocks by quadratic initialization. Each of the blocks has first and second coordinates and weights are assigned to nets connecting those of the blocks within the subsets, the quadratic initialization in turn includes determining a cost of each of the nets connecting any two of the blocks within the subsets as one-half of a sum of squares of distances between the any two of the blocks; and minimizing a total cost over all of the nets to determine an initial placement of the set of blocks. Analytical placement is then carried out based on the initial quadratic placement.

Abstract: Methods and systems for targeted advertisement include transmitting a pre-filter to a user device, responsive to contextual information supplied by the user device to determine one or more inferences based on physical browsing information, collected at the user device, in compliance with one or more privacy policies of the user. One or more targeted advertisements are determined, using a processor, based on the one or more inferences. The one or more targeted advertisements are transmitted to the user device.

Abstract: A semiconductor device which includes a substrate having integrated circuits; and metallization layers on the substrate, the metallization layers having a peripheral region adjacent to a kerf region of the semiconductor device and containing a crack stop structure. The crack stop structure includes a bottom portion containing a plurality of the metallization layers connected by vias with each metallization layer decreasing in width in a step pyramid structure from a bottom of the bottom portion to a top of the bottom portion; and a top portion containing a top metallization layer of the metallization layers connected to the bottom portion, the top metallization layer being wider than a top-most metallization layer of the bottom portion and having a segment that extends toward the kerf region so as to create an overhang with respect to the bottom portion.

Abstract: A method for fabricating a semiconductor structure includes the following steps. A plurality of dielectric layers is formed on a substrate, wherein the material composition and layer positioning of each of the plurality of dielectric layers are selected to enable defined junctions for one or more features of the semiconductor structure. A trench is formed through each of the plurality of dielectric layers to the top of the substrate, wherein the height and width dimensions of the trench are selected in accordance with an aspect ratio trapping process. A vertical fin structure is formed by epitaxially growing material within the trench on the top of the substrate. In further steps, gate stack and source/drain regions are formed around the vertical fin structure in accordance with the positioning of the plurality of dielectric layers. The resulting semiconductor structure, in one or more examples, is a vertical transport field-effect transistor.

Abstract: A method for multicategory classification of streaming data records includes receiving a list of signature rules, each comprising a Boolean expression of a set of atomic recognizers (ARs) of one or more input fields of an input record and an assignment of a signature if the Boolean expression evaluates to TRUE, generating a list of all signature contexts from the list of signature rules, generating a context lookup table for each context, and processing a stream of input records on which signature detection is performed by using said ARs, said list of signature contexts, and said context lookup table for each context, wherein each input record in the stream of input records is classified into one of a plurality of categories based on the signature detection result, wherein an amount of processing grows sublinearly with a number of signature rules being processed.