Automated behavioral and static analysis using an instrumented sandbox and machine learning classification for mobile security
AssigneeVeracode, Inc.
InventorsTheodora H. Titonis, Nelson R. Manohar-Alers, Christopher J. Wysopal
Life of this patent
Estimating the term…
Abstract
The present system includes a computer-networked system that allows mobile subscribers, and others, to submit mobile applications to be analyzed for anomalous and malicious behavior using data acquired during the execution of the application within a highly instrumented and controlled environment for which the analysis relies on per-execution as well as comparative aggregate data across many such executions from one or more subscribers.
Claims59
A method for assessing the quality of mobile applications, the method comprising:
- providing a computer networked environment comprising a cloud-based service for mobile devices that when operated;
- performs a static analysis risk assessment of binary code associated with a plurality of mobile applications, each being submitted by a submission source;
- examines execution behaviors of the mobile applications within an instrumented sandbox environment;
- and
- aggregates analyses of the execution behaviors and static analysis into predictor statistics describing quality and vulnerability characteristics of mobile applications.
A system for assessing the quality of mobile applications, the system comprising:
- at least one memory storing computer-executable instructions;
- and
- at least one processing unit for executing the instructions store in memory, wherein execution of the instructions results in one or more applications together comprising:
- a webserver component for receiving requests to analyze one or more mobile applications;
- a controller component for scheduling the received requests;
- a dispatcher module for providing a sandbox suitable for executing the request based on one or more criteria associated with the request and executing the request within the sandbox;
- and
- a database component for storing data resulting from the execution of the request.
Dependencies are inferred from the claim text.