Patent ID: 8918881

Claim:
A system for off-device anti-malware protection for mobile devices, comprising: a processor configured to: receive a software inventory for a mobile device, wherein the software inventory identifies a plurality of applications installed on the mobile device; and determine whether one or more of the plurality of applications identified in the software inventory are associated with malware based on an enterprise policy that includes custom rules for scanning of apps based on security requirements for scanning apps for risk assessment, wherein the enterprise policy includes a security policy for scanning apps for risk assessment, and wherein the determining of whether the one or more of the plurality of applications identified in the software inventory are associated with malware comprises to: perform a static analysis on an app including to extract method and function names called by the app; and perform a dynamic analysis on the extracted method and function names called by the app to determine whether a scope of authorization or a proper user permission is exceeded during execution; and a memory coupled to the processor and configured to provide the processor with instructions.