METHOD AND SYSTEM FOR APPLICATION SECURITY EVALUATION

• US 20130132565A1
• Filed: 11/21/2012
• Published: 05/23/2013
• Est. Priority Date: 11/21/2011
• Status: Active Grant

• Current Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Original Assignee: Swisscom AG (Government of Switzerland)
• Inventors: Cetin, Feride, Ruhl, Torben
• Granted Patent: US 9,661,038 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 11/36 Preventing errors by testing or debugging software
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 65/40 Support for services or applications
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

A system and method may be used in generating security profiles for mobile device applications. An application may be installed and executed in a controlled execution environment. Physical, functional, data and/or communications parameters of the executing application may be monitored and/or analyzed. In this regard, the analysis may comprise evaluation based on comparison against benchmark data for the specific type of application being executed and for the specific execution environment. A security profile may be generated based on the monitoring and/or analysis. In this regard, the security profile may include security classification information for the application. The security profile may be made available to servers and/or to user mobile devices.

Claims

1. A method of evaluating user feedback of mobile communication device applications, the method comprising:

receiving by a first server system, a plurality of user feedback messages from a plurality of mobile communication devices, the plurality of user feedback messages comprising information associated with one or more applications operable on the plurality of mobile communication devices;

selecting, based on the plurality of user feedback messages, one of the one or more operable applications;

determining a classification parameter of the selected operable application based on evaluating one or more operating characteristics of the selected operable application;

communicating the classification parameter to one or more of the plurality of mobile communication devices; and

communicating the classification parameter to an application evaluation database on a second server system.

2. The method of claim 1, wherein the plurality of user feedback messages associated with the one or more applications operable on the plurality of mobile communication devices comprise a problem type and at least one of a version identifier, a certificate identifier, an installation date and/or time, or a usage date and/or time associated with the one or more operable applications.

3. The method of claim 2, wherein the problem type is one of spam, phishing, suspicious user data request, inappropriate content, or phone functionality problem.

4. The method of claim 2, comprising selecting the one of the one or more operable applications based on at least the problem type.

5. The method of claim 4, comprising selecting the one of the one or more operable applications based on computing a most likely application to cause the problem type from the one or more operable applications, wherein the computing is based on the user feedback messages associated with the one or more operable applications.

6. The method of claim 5, comprising computing the most likely application to cause the problem type by forming a weighted average of the at least one of a version identifier, a certificate identifier, an installation date and/or time, or a usage date and/or time associated with the one or more operable applications.

7. The method of claim 1, comprising operating the selected application on the first server system to obtain the one or more operating characteristics of the selected operable application.

8. The method of claim 7, comprising operating the selected application using a script.

9. The method of claim 8, wherein the script comprises code to operate selected functionalities of the selected application.

10. The method of claim 8, wherein the script comprises code to operate every functionality of the selected application.

11. The method of claim 8, comprising generating the script automatically from a functionality tree associated with the selected application.

12. The method of claim 1, comprising determining usage parameters of at least one resource used in operating the selected application, the at least one resource comprising at least one of data received, data transmitted, camera usage, battery usage, network usage, telephone functionality usage or Short-message Service usage.

13. The method of claim 1, comprising determining a type of data accessed, generated, transmitted or otherwise used in operating the selected application.

14. A system for of evaluating user feedback of mobile communication device applications, the system comprising:

a first server configured for receiving a plurality of user feedback messages from a plurality of mobile communications devices, the user feedback messages comprising application information of one or more applications operable on the plurality of mobile communications devices;

a selector configured for selecting, based on the user feedback messages, one of the one or more operable applications;

an evaluator configured for evaluating one or more operating characteristics of the selected operable application;

a classifier configured for determining a classification parameter of the selected application based on the operating characteristics; and

a communication system configured for communicating the classification parameter to the one or more mobile communications devices, and for communicating the classification parameter to an application evaluation database on a second server.

15. The system of claim 14, wherein the plurality of user feedback messages associated with the one or more applications operable on the plurality of mobile communication devices comprise a problem type and at least one of a version identifier, a certificate identifier, an installation date and/or time, or a usage date and/or time associated with the one or more operable applications.

16. The system of claim 15, wherein the problem type is one of spam, phishing, suspicious user data request, inappropriate content, or phone functionality problem.

17. The system of claim 15, wherein the selecting is based on at least the problem type.

18. The system of claim 17, wherein the selecting is based on computing a most likely application to cause the problem type from the one or more operable applications, where the computing is based on the user feedback messages associated with the one or more operable applications.

19. The system of claim 18, wherein the most likely application to cause the problem type is computed by forming a weighted average of the at least one of a version identifier, a certificate identifier, an installation date and/or time, or a usage date and/or time associated with the one or more operable applications.

20. The system of claim 14, wherein the evaluator is configured for running or operating the selected application on the first server system to obtain the one or more operating characteristics of the selected operable application.

21. The system of claim 20, wherein the operating of the selected application is performed using a script.

22. The system of claim 21, wherein the script comprises code to operate selected functionalities of the selected application.

23. The system of claim 21, wherein the script comprises code to operate every functionality of the selected application.

24. The system of claim 21, wherein the script is generated automatically from a functionality tree associated with the selected application.

25. The system of claim 14, wherein the evaluator is configured for determining usage parameters of at least one resource used in the operating of the selected application, the at least one resource comprising at least one of data received, data transmitted, camera usage, battery usage, network usage, telephone functionality usage or Short-message Service usage.