A method of confirming an application installation event associated with a device infrastructure of a mobile device, the mobile device comprising a mobile agent, the method comprising: identifying, by the mobile agent, a newly installed application on the device infrastructure; in response to identifying the newly installed application, the mobile agent disabling the newly installed application; sending an application authorization request from the mobile agent over a communications network, the application authorization request including application identification information which identifies the newly installed application; receiving a decision instruction at the mobile agent, the decision instruction being based on a comparison of the application identification information with one or more listed applications in a plurality of applications identified in an application authorization list, the application authorization list being remote from the mobile device over the communications network, the application authorization list comprising a combination of all the application lists collected from each mobile agent of a plurality of mobile devices including the mobile device, each of the application lists comprising identification of applications installed on a respective one of the plurality of mobile devices; and re-enabling, by the mobile agent, the disabled newly installed application in response to the received decision instruction indicating that the installation of the newly installed application is approved, or uninstalling, by the mobile agent, the disabled newly installed application in response to the received decision instruction indicating that the installation of the newly installed application is not approved. identifying, by the mobile agent, a newly installed application on the device infrastructure; in response to identifying the newly installed application, the mobile agent disabling the newly installed application; sending an application authorization request from the mobile agent over a communications network, the application authorization request including application identification information which identifies the newly installed application; receiving a decision instruction at the mobile agent, the decision instruction being based on a comparison of the application identification information with one or more listed applications in a plurality of applications identified in an application authorization list, the application authorization list being remote from the mobile device over the communications network, the application authorization list comprising a combination of all the application lists collected from each mobile agent of a plurality of mobile devices including the mobile device, each of the application lists comprising identification of applications installed on a respective one of the plurality of mobile devices; and re-enabling, by the mobile agent, the disabled newly installed application in response to the received decision instruction indicating that the installation of the newly installed application is approved, or uninstalling, by the mobile agent, the disabled newly installed application in response to the received decision instruction indicating that the installation of the newly installed application is not approved.