A method for determining whether data is included in a database is described. In one embodiment, the method may include receiving, from a remote computing device, a search request that includes a portion of a signature, comparing the portion of the signature with a plurality of signatures stored at the database, determining whether at least one match exists between the portion of the signature and the plurality of signatures, upon determining at least one match exists, identifying each match and identifying a bloom filter that includes each match, and transmitting the bloom filter to the remote computing device.