1. A computer program product embodied on a non-transitory computer readable medium for performing operations, comprising: identifying a database including a plurality of known objects; segmenting the database into a plurality of segments; and assigning each of the plurality of known objects to one of the plurality of segments, based at least in part on a prevalence associated with each of the plurality of known objects, wherein the database includes whitelisted objects, which are non-malicious objects, and which are defined utilizing a Bloom filter of a client system, and wherein the Bloom filter is further configured to determine whether to perform a lookup operation on the database.