A mobile station comprising: - a mobile terminal (ME), - security resources (SR), - a discovery module (DIS) implemented in the mobile station and configured to: - determining the security resources (SR) of the mobile station, - deriving at least one security level (SL) of the mobile station achieved by means of the security resources (SR), and - outputting of the derived security level (SL) of the mobile station, characterized in: - that the mobile station further contains application information about at least one application (APP) implemented or to be implemented in the mobile station, wherein the discovery module (DIS) being used to derive and output an application security level (ASL), as security level, achieved during operation of the application (APP) in the mobile station using the security resources (SR) in addition to a security level (SL) output independently of the operation of the application (APP) in the mobile station, and - that an application control module coupled to the discovery module (DIS) is configured to control the execution of the application (APP) in a range of functions being dependent on the derived application security level (ASL) of the application (APP), wherein the application being executable in an extended range of functions, being executable in a full range of functions, being executable in a restricted range of functions, and being executable in deactivated manner, and security-critical functionalities being added to the range of functions as the range of functions of the application (APP) increases. - a mobile terminal (ME), - security resources (SR), - a discovery module (DIS) implemented in the mobile station and configured to: - determining the security resources (SR) of the mobile station, - deriving at least one security level (SL) of the mobile station achieved by means of the security resources (SR), and - outputting of the derived security level (SL) of the mobile station, - determining the security resources (SR) of the mobile station, - deriving at least one security level (SL) of the mobile station achieved by means of the security resources (SR), and - outputting of the derived security level (SL) of the mobile station, - that the mobile station further contains application information about at least one application (APP) implemented or to be implemented in the mobile station, wherein the discovery module (DIS) being used to derive and output an application security level (ASL), as security level, achieved during operation of the application (APP) in the mobile station using the security resources (SR) in addition to a security level (SL) output independently of the operation of the application (APP) in the mobile station, and - that an application control module coupled to the discovery module (DIS) is configured to control the execution of the application (APP) in a range of functions being dependent on the derived application security level (ASL) of the application (APP), wherein the application being executable in an extended range of functions, being executable in a full range of functions, being executable in a restricted range of functions, and being executable in deactivated manner, and security-critical functionalities being added to the range of functions as the range of functions of the application (APP) increases. <EOS>