Systems and methods for application security analysis

A mobile device management system, comprising:

• one or more enterprise devices that provide enterprise services;
• and
• an application risk analysis system, comprising a processor that executes instructions stored in memory to:
• detect mobile devices attempting to access the enterprise services;
• and
• conduct a risk analysis of a plurality of applications residing on the mobile devices, comprising:
• comparing the plurality of applications to a whitelist and blacklist;
• for the applications not on the whitelist or blacklist, monitoring application behaviors of the application;
• grouping application behaviors that indicate an increased risk into groups comprising a privacy risk, a data leak risk, an account takeover risk, a device takeover risk, and a malware risk;
• calculating a risk score for each of the plurality of applications based on the application behaviors;
• and
• automatically remediating respective applications of the plurality of applications if the risk score calculated for the respective applications meets or exceeds a risk score threshold.

A non-transitory computer-readable storage medium having embodied thereon instructions, which, when executed by at least one processor, perform steps of a method, the method comprising:

• evaluating each of a plurality of applications for one or more of privacy, data leakage, and malicious behavior, the plurality of applications residing on a mobile device, the mobile device being configurable to access an enterprise system;
• calculating a risk score for each of the plurality of applications based on the evaluating;
• determining whether each of the plurality of applications meets or exceeds a risk score threshold;
• and
• automatically remediating the applications, of the plurality of applications, for which the risk score meets or exceeds the risk score threshold.