Patent ID: 8925092

Claim:
A non-transitory computer-readable medium embodying a program executable in a computing device, the program comprising: code that identifies a plurality of different software applications installed in a user computing device of a plurality of user computing devices in a networked environment, the user computing device being associated with an end user, the end user having software installation access to the user computing device, the networked environment being associated with an enterprise entity, and the plurality of different software applications being installed on individual ones of the plurality of user computing devices; code that identifies a current version of a corresponding software application of the plurality of different software applications based at least in part on version data that includes information about a plurality of versions of the corresponding software application installed on the plurality of user computing devices in the networked environment, the current version being a latest version of the plurality of versions of the corresponding software application that is installed on at least one of the plurality of user computing devices; and code that, in response to receiving data indicating respective characteristics for individual ones of the plurality of different software applications, generates respective software application ratings for the individual ones of the plurality of different software applications based at least in part on the respective characteristics and a comparison of the current version of the corresponding software application with a respective installed version of the corresponding software application, wherein at least one of the respective characteristics includes the respective installed version; code that, in response to receiving data indicating a relationship of the user computing device to the networked environment and receiving data indicating a relationship of the end user to the enterprise entity, generates respective risk profiles for respective installations of the individual ones of the plurality of different software applications on the user computing device in the networked environment, the respective risk profiles being generated based at least in part on the respective software application ratings, the relationship of the user computing device to the networked environment, and the relationship of the end user associated with the user computing device to the enterprise entity, wherein the data indicating the relationship of the user computing device to the networked environment comprises at least one of whether the user computing device stores protected information, whether the user computing device stores local data, or whether the user computing device hosts at least one unmanaged application; and code that performs at least one action in response to at least one of the respective risk profiles meeting at least one predefined criterion.