Mobile malicious software mitigation

A system for malicious software mitigation in a network, comprising:

• an alert acquisition component configured to receive an internet protocol address that is engaging in malicious software behavior, a profile of the malicious software behavior, and a time frame when the internet protocol address was engaging in the malicious software behavior;
• a correlation component configured to analyze a set of logs that maintain records regarding activities of a set of devices associated with the wireless network, and configured to determine an identifying characteristic of a mobile device that was assigned the internet protocol address during the time frame the internet protocol address was engaging in the malicious software behavior;
• and
• a communication component configured to send the profile to the mobile device.

A method for malicious software mitigation in a wireless network, comprising:

• receiving, from a core network, an internet protocol address that is exhibiting bot behavior, a profile of the bot behavior, and a time when the internet protocol address was exhibiting the bot behavior;
• analyzing a set of mobility logs maintaining internet protocol address assignments by a mobility network and determining that a device in a set of devices associated with the wireless network was assigned the internet protocol address at the time the internet protocol address was exhibiting the bot behavior;
• determining an identity of the device based on the analyzing;
• and communicating the profile to the device.