Signature-based detection