System and method for vetting mobile phone software applications

A system for vetting a mobile application, comprising:

• one or more processors;
• and
• memory storing one or more programming instructions that when executed by the one or more processors cause the one or more processors to:
• determine if the mobile application includes malware using one or more first tier computing resources, wherein determining if the mobile application includes malware using one or more first tier computing resources comprises communicatively coupling the mobile application to one or more first tier computing resources of an emulation environment, transmitting one or more spoofed checkable artifacts from the one or more first tier computing resource of the emulation environment to the mobile application, and analyzing interactions between the mobile application and the emulation environment based on the one or more spoofed checkable artifacts to determine the presence of malware in the mobile application;
• if the mobile application is determined to not include malware using the one or more first tier computing resources:
• determine if the mobile application includes malware using one or more second tier computing resources, wherein determining if the mobile application includes malware using one or more second tier computing resources comprises communicatively coupling the mobile application to one or more second tier computing resources of an emulation environment, transmitting one or more spoofed checkable artifacts from the one or more second tier computing resources of the emulation environment to the mobile application, and analyzing interactions between the mobile application and the emulation environment based on the one or more spoofed checkable artifacts to determine the presence of malware in the mobile application, wherein the one or more first tier computing resources are cheaper, have more checkable artifacts, and are more scalable than the one or more second tier computing resources;
• and
• if the mobile application is determined to not include malware using the one or more second tier computing resources:
• determine if the mobile application includes malware using one or more third tier computing resources, wherein determining if the mobile application includes malware using one or more third tier computing resources comprises communicatively coupling the mobile application to one or more third tier computing resources of an emulation environment, transmitting one or more spoofed checkable artifacts from the one or more third tier computing resources of the emulation environment to the mobile application, and analyzing interactions between the mobile application and the emulation environment based on the one or more spoofed checkable artifacts to determine the presence of malware in the mobile application, wherein the second tier computing resources are cheaper, have more checkable artifacts, and are more scalable than the one or more third tier computing resources.

A non-transitory computer readable storage medium having stored thereon a set of instructions for vetting a mobile application, wherein the set of instructions when executed by a computing device, cause the computing device to:

• determine if the mobile application includes malware using one or more first tier computing resources, wherein determining if the mobile application includes malware using one or more first tier computing resources comprises communicatively coupling the mobile application to one or more first tier computing resources of an emulation environment, transmitting one or more spoofed checkable artifacts from the one or more first tier computing resource of the emulation environment to the mobile application, and analyzing interactions between the mobile application and the emulation environment based on the one or more spoofed checkable artifacts to determine the presence of malware in the mobile application;
• if the mobile application is determined to not include malware using the one or more first tier computing resources:
• determine if the mobile application includes malware using one or more second tier computing resources, wherein determining if the mobile application includes malware using one or more second tier computing resources comprises communicatively coupling the mobile application to one or more second tier computing resources of an emulation environment, transmitting one or more spoofed checkable artifacts from the one or more second tier computing resources of the emulation environment to the mobile application, and analyzing interactions between the mobile application and the emulation environment based on the one or more spoofed checkable artifacts to determine the presence of malware in the mobile application, wherein the one or more first tier computing resources are cheaper, have more checkable artifacts, and are more scalable than the one or more second tier computing resources;
• and
• if the mobile application is determined to not include malware using the one or more second tier computing resources:
• determining if the mobile application includes malware using one or more third tier computing resources, wherein determining if the mobile application includes malware using one or more third tier computing resources comprises communicatively coupling the mobile application to one or more third tier computing resources of an emulation environment, transmitting one or more spoofed checkable artifacts from the one or more third tier computing resources of the emulation environment to the mobile application, and analyzing interactions between the mobile application and the emulation environment based on the one or more spoofed checkable artifacts to determine the presence of malware in the mobile application, wherein the second tier computing resources are cheaper, have more checkable artifacts, and are more scalable than the one or more third tier computing resources.