Patent ID: 9178852
Filing Date: 2015-11-03
Classification: G06F,H04L

Abstract:
1. A system for in-line filtering of applications for mobile devices, comprising: a hardware processor of an inline filtering device configured to: intercept a request for downloading an application to a mobile device; throttle the request for downloading the application to the mobile device pending determination of a result of a risk analysis of the application based on an application risk policy, wherein the application is blocked from completing a transfer to the mobile device while it is throttled at the inline filtering device; generate a risk score of the application as a result of the risk analysis of the application based on the application risk policy, wherein the generation of the risk score comprises: check an application cache comprising: determine whether the application has been previously analyzed based on the application risk policy; in the event that the application has been previously analyzed, determine whether a risk score of the application is to be updated based on an updating rule that is triggered if a last time that the application has been previously analyzed exceeds a configured setting; and in the event that the application has been previously analyzed, and in the event that the updating rule was not triggered, return a previously determined risk score of the application; and if the application has been previously analyzed and the updating rule was triggered based on a determination that one or more new rules or analysis are available to perform on the application, then the application is to be analyzed again based on the application risk policy, and determine whether the application includes previously known malware, exhibits new malware behaviors, poses a privacy or security risk based on the application risk policy, or any combination thereof; modify a response to the request for downloading the application to the mobile device based on the risk score; and a memory coupled to the hardware processor and configured to provide the hardware processor with instructions.