US 2019/0174319 A1 · DETECTION AND IDENTIFICATION OF POTENTIALLY HARMFUL APPLICATIONS BASED ON DETECTION AND ANALYSIS OF MALWARE/SPYWARE INDICATORS

Abstract

Systems and methods for detecting and identifying malware/potentially harmful applications based on behavior characteristics of a mobile application are disclosed. One embodiment of a method of detecting a potentially harmful application includes detecting behavior characteristics of a mobile device and, based on those detected behavior characteristics, identifying one or more indicators that the mobile application is a potentially harmful application. Those indicators are then analyzed to determine whether the application is a potentially harmful application.

Claims20

Dependent claims

A malware detector, comprising:

a data traffic monitor that detects data traffic of a mobile application on a mobile device;
an activity monitor that detects characteristics of behavior of the mobile application;
and
an analysis engine that identifies, based on the data traffic of the mobile application and the characteristics of behavior of the mobile application, one or more indicators that the mobile application is a potentially harmful application and determines, based on an analysis of the one or more indicators, whether the mobile application is a potentially harmful application.

1 more element

Dependencies are inferred from the claim text.

Facts

Application

16/206,020Filed 30 Nov 2018

Priority

1 Dec 2017

Published

6 Jun 2019

Term ends

Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04W 12/128
Detection or prevention of fraud: anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
H04L 63/0281
For separating internal from external traffic, e.g. firewalls: proxies
H04L 63/1425
By monitoring network traffic: traffic logging, e.g. anomaly detection
H04L 63/145
Countermeasures against malicious traffic: the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Detection and identification of potentially harmful applications based on detection and analysis of malware/spyware indicators

Life of this patent

Detection and identification of potentially harmful applications based on detection and analysis of malware/spyware indicators

Life of this patent

Abstract

Claims20