Patent ID: 8782792

Claim:
A non-transitory computer-readable-storage medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to: receive an application; receive a request from a mobile computing platform to evaluate the application for malware, wherein the mobile computing platform places a limitation on an ability of third-party software to inspect application behavior; receive emulation information from the mobile computing platform, the emulation information relating to emulating the mobile computing platform, the emulation information comprising an emulation credential; look up the emulation credential in a database to retrieve hardware and/or software details of the mobile computing platform; evaluate the application for malware by: executing the application within an emulation of the mobile computing platform based on the hardware and/or software details of the mobile computing platform retrieved from the database by looking up the emulation credential received from the mobile computing platform in the database; circumventing the limitation on the ability of third-party software to inspect application behavior by performing a behavioral analysis on the application executing within the emulation of the mobile computing platform; transmit a result of evaluating the application for malware to the mobile computing platform.