Patent ID: 8713684

Claim:
A system for quantifying risks of applications (“apps”) for mobile devices, comprising: a processor configured to: receive an application for a mobile device; perform an automated analysis of the application based on a risk profile, wherein the risk profile is based on an enterprise policy that includes custom rules for scanning of apps based on security requirements; and generate a risk score based on the automated analysis of the application based on the risk profile, wherein the generation of the risk score comprises: check an application cache comprising: determine whether the application has been previously analyzed; and in the event that the application has been previously analyzed, return the previously determined risk score of the application; extract metadata associated with the application, the metadata comprising application permissions, file and version name, author of the application, application ID, package name, or any combination thereof; query public app market data relating to the application, the public app market data including application description, application ranking in a store, vendor reputation of the application, or any combination thereof; perform a disassembly/byte code pass comprising: determine whether the application performs a function based on an inspection of byte code or assembly language of the application, the function including sending text/SMS messages without user's permission, using GPS/location services without user's permission, or any combination thereof; or any combination thereof; and a memory coupled to the processor and configured to provide the processor with instructions.