Patent ID: 8832840

Claim:
A method, comprising: receiving, by a server device, an instruction to determine whether a user device has stored an unauthorized application; obtaining, from the user device and as a result of the instruction, a list of one or more applications that are stored on the user device; obtaining, by the server device, one or more application profiles associated with the list of one or more applications, where each of the one or more application profiles identify a respective level of risk associated with each of the one or more applications of the list; obtaining, by the server device, a plurality of first scores that are associated with the respective level of risk associated with the one or more applications; retrieving, from a memory associated with the server device, a user profile associated with a user of the user device, where the user profile identifies at least one of: a job level associated with a job held by the user, a privilege level of the user for accessing confidential information, or a usage history for identifying whether the user has been associated with a security incident within a period of time before receiving the instruction; identifying, by the server device, a highest level of risk that is authorized for the one or more applications of the list based on the job level, the privilege level, or the usage history; generating, by the server device, a second score that corresponds to the highest level of risk associated with the one or more applications; determining, by the server device, whether a level of risk, associated with an application, of the one or more applications of the list, is greater than the identified highest level of risk, based on a comparison of one of the plurality of first scores and the second score; and transmitting, to the user device, a notification that the application is not authorized to be stored on the user device when the level of risk is greater than the identified highest level of risk.