Patent ID: 9591003
Date: 2017-03-07
CPC Classifications: G06F,G06Q,H04L,H04W

Claim:
1. A non-transitory computer-readable medium embodying a program executable in at least one computing device, wherein, when executed, the program causes the at least one computing device to at least: execute an instance of an application in a sandboxed environment, the application being received from an application marketplace; determine during runtime of the instance of the application that the instance of the application is attempting to access dynamically loaded code based at least in part on a determination that the instance of the application is making a particular application programming interface (API) call to obtain executable code from a network site, wherein the instance of the application is restricted from obtaining the executable code except by way of the particular API call; perform a security evaluation on the dynamically loaded code in response to determining that the instance of the application is attempting to access the dynamically loaded code, the security evaluation being based at least in part on at least one of: a version of the dynamically loaded code, a source associated with the dynamically loaded code, or whether the dynamically loaded code is configured to communicate with an untrusted server; communicate a result of the security evaluation to an entity device associated with the application marketplace; and modify a portion of the dynamically loaded code to eliminate a security risk detected by the security evaluation, a remaining portion of the dynamically loaded code remaining unmodified.