1. A method comprising: assembling a full signature definition file comprising a first received malware signature, upon receipt of the first received malware signature, wherein the full signature definition file further comprises a first plurality of malware signatures received up to a specified time; associating a version identifier with the full signature definition file; publishing the full signature definition file after the specified time; assembling a streaming signature definition file comprising the first received malware signature, upon the receipt of the first received malware signature, wherein the streaming signature definition file further comprises a second plurality of malware signatures received over a first time period, the first time period occurs prior to the specified time, and the first received malware signature is received during the first time period; associating the version identifier with the streaming signature definition file; and publishing the streaming signature definition file upon completion of the first time period.