1. A computer implemented method comprising: extracting information about an application or a service on a computer, the information including a plurality of attributes regarding the application or service; and deriving a signature for a subset of the attributes for the application or service.