System for implementing security on telecommunications terminals

A telecommunications terminal having data processing capabilities, the telecommunications terminal being susceptible of having installed thereon software applications or executing software applications installed thereon, wherein a plurality of software applications are monitored, and wherein each of the plurality of software applications has associated therewith a respective numerical value indicating a level of security of the corresponding software application, comprising:

• a software agent, adapted to be executed by the telecommunications terminal, said software agent comprising an adaptation to at least one among:
• conditionally allow the installation of software applications on the telecommunications terminal;
• and
• conditionally allow the software applications, when executed on the telecommunications terminal, to access telecommunications terminal resources based on the respective level of security, and to receive from a server updated numerical values indicating levels of security calculated by the server,
• wherein said server comprises:
• a binary analyzer adapted to perform a static analysis of codes of the software applications;
• and
• a vulnerability analyzer adapted to perform an analysis of vulnerabilities exhibited by the software applications,
• wherein said vulnerability analyzer comprises an adaptation to perform said analysis of vulnerabilities based on information obtained from one or more among a computer emergency response team, an open vulnerability and assessment language, common vulnerabilities and exposures bulletins of the software applications producers/vendors, and software certification authorities.

A server including at least one hardware component, comprising:

• a communication interface to communicate with at least one telecommunications terminal having data processing capabilities,
• wherein the telecommunications terminal is capable of having installed or run thereon software applications, wherein a plurality of software applications are monitored, and wherein each of the plurality of monitored software applications has associated therewith a respective numerical value indicating a level of security of the corresponding software application, said numerical value indicating the level of security being capable of varying in time,
• said server comprising:
• a security level evaluator to dynamically calculate the numerical value indicating the level of security of each of the plurality of monitored software applications, and to communicate to a software agent the calculated numerical value indicating the level of security of each of the plurality of monitored software applications to be installed or run on said telecommunications terminal,
• a binary analyzer adapted to perform a static analysis of codes of the software applications;
• and
• a vulnerability analyzer adapted to perform an analysis of vulnerabilities exhibited by the software applications,
• wherein said vulnerability analyzer comprises an adaptation to perform said analysis of vulnerabilities based on information obtained from one or more among a computer emergency response team, an open vulnerability and assessment language, and common vulnerabilities and exposures bulletins of the software applications producers/vendors, and software certification authorities.