Similar Items: Risk Model for Choosing Signature Thresholds for Software Updates