Risk assessment for managed client devices
AssigneeVMware, Inc.
InventorsPratik Jagad, Krishna Kumar Bhavesh
Life of this patent
Estimating the term…
Abstract
Examples of managed device risk assessment are described. In one example, a copy of an application installed on a client device is decompiled, to identify operations performed during execution of the application. A profile including one or more rules that specify whether the operations are assigned higher or lower levels of risk is obtained. A first number of times that the first rule is violated by the operations is determined, and a second number of times that the second rule is violated by the operations is determined. A total of the violations is compared against a threshold, and a remedial action is initiated in response to determining that the total exceeds the threshold.
Claims20
A method for managed device risk assessment, comprising:
- decompiling a copy of an application installed on a client device to identify a plurality of operations to be performed during execution of the application;
- obtaining a profile for the application, the profile comprising a first rule that specifies whether the plurality of operations are assigned a high level of risk, a second rule that specifies whether the plurality of operations are assigned a low level of risk, and a predetermined threshold;
- determining, with at least one computing device, a first number of times that the first rule is violated by the plurality of operations;
- determining, with the at least one computing device, a second number of times that the second rule is violated by the plurality of operations;
- determining that a total of the first number and the second number exceeds the predetermined threshold;
- and
- initiating a remedial action in response to determining that the total exceeds the predetermined threshold.
A non-transitory computer-readable medium embodying program code thereon that, when executed by at least one computing device, directs the at least one computing device to at least:
- decompile a copy of an application installed on a client device to identify a plurality of operations to be performed during execution of the application;
- obtain a profile for the application, the profile comprising a first rule that specifies whether the plurality of operations are assigned a high level of risk and a second rule that specifies whether the plurality of operations are assigned a low level of risk;
- determine a first number of times that the first rule is violated by the plurality of operations;
- determine a second number of times that the second rule is violated by the plurality of operations;
- determine that a total of the first number and the second number exceeds a predetermined threshold;
- and
- initiate a remedial action in response to the total exceeding the predetermined threshold.
Dependencies are inferred from the claim text.