A software analysis system comprising: a label generating unit configured to, in accordance with codes of applications, determine whether the applications access predetermined privacy information due to permission, assigns a first label to an application that is determined to access the predetermined privacy information, and assigns a second label, which is different from the first label, to an application that is determined not to access the predetermined privacy information; a score calculating unit configured to calculate a score of each word included in descriptions of the applications such that a high score is set to a word that is included in a text of the description of the application, to which the first label is assigned, more often than in a text of the description of the application, to which the second label is assigned, and extracts a predetermined number of words at a top with regard to the score calculated from the descriptions of the applications in relation to the permission; a classifying unit configured to classify the application whose text of the description includes the word extracted by the score calculating unit as an application that refers to the permission and classifies the application whose text of the description does not include the word extracted by the score calculating unit as an application that does not refer to the permission; and an identifying unit configured to identify, as a malignant application, an application to which the first label is assigned by the label generating unit and which is classified by the classifying unit as an application that does not refer to the permission. a label generating unit configured to, in accordance with codes of applications, determine whether the applications access predetermined privacy information due to permission, assigns a first label to an application that is determined to access the predetermined privacy information, and assigns a second label, which is different from the first label, to an application that is determined not to access the predetermined privacy information; a score calculating unit configured to calculate a score of each word included in descriptions of the applications such that a high score is set to a word that is included in a text of the description of the application, to which the first label is assigned, more often than in a text of the description of the application, to which the second label is assigned, and extracts a predetermined number of words at a top with regard to the score calculated from the descriptions of the applications in relation to the permission; a classifying unit configured to classify the application whose text of the description includes the word extracted by the score calculating unit as an application that refers to the permission and classifies the application whose text of the description does not include the word extracted by the score calculating unit as an application that does not refer to the permission; and an identifying unit configured to identify, as a malignant application, an application to which the first label is assigned by the label generating unit and which is classified by the classifying unit as an application that does not refer to the permission.