Reputation scoring of social networking applications

• US 9,594,903 B1
• Filed: 02/29/2012
• Issued: 03/14/2017
• Est. Priority Date: 02/29/2012
• Status: Active Grant

• Current Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: L, Yamini
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Truong, Thong
• Application Number:
  US13/408,000
• Time in Patent Office: 1,840 Days
• Field of Search: 726/22
• US Class Current: 1/1
• CPC Class Codes: G06F 21/561 Virus type analysis
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A method and apparatus for reputation scoring of applications on social networking services is described. A reputation score system scans a profile area of an application operating in a social networking service and generates a profile metric based on the content of the profile area. A reputation score system scans analyzes application installation behavior of an application and generates an installation metric. The reputation score system analyzes application activity of the application and generating an application metric. The reputation score system analyzes permissions requested by the application and generates a permissions metric. The reputation score system generates a reputation based on the profile metric, installation metric, application metric and permissions metric.

Claims

1. A method, implemented by a first computing system programmed to perform the following, comprising:

analyzing installation behavior of an application operating in a social networking service and generating an installation metric, wherein the social networking service comprises an online platform, wherein the installation metric is based on at least one of a setting change or a permission change, made by the application to a user profile space, during installation of the application;

analyzing application activity of the application and generating an application metric, wherein analyzing the application activity of the application comprises;

determining a purpose of the application based on a description of the application; and

assessing whether the activity of the application exceeds the purpose of the application;

analyzing permissions requested by the application and generating a permissions metric, wherein the permissions metric is based on at least one of the following permissions;

accessing a user'"'"'s social networking service friend list, posting on a friend'"'"'s social networking service wall without user consent, messaging to all user social networking service contacts without user consent, or requesting social networking service chat permissions; and

generating a reputation score of the application based on the installation metric, application metric, and permissions metric.

2. The method of claim 1, further comprising identifying the application as a secure application if the reputation score is one of greater than or less than a threshold score.

3. The method of claim 2, further comprising blocking installation of the application if the reputation score is indicative of a malicious application.

4. The method of claim 2, further comprising scanning a profile area of the application operating in the social networking service and generating a profile metric based on content of the profile area, and wherein the reputation score is a sum of the profile metric, installation metric, application metric, and permissions metric.

5. The method of claim 2, further comprising notifying a user of the reputation score of the application.

6. The method of claim 1, further comprising maintaining a data store comprising a plurality of application reputation scores.

7. The method of claim 6, further comprising installing, if the application is not in the data store, the application in a profile area of the application operating in the social networking service.

8. A computing system, comprising:

a memory; and

a processor coupled with the memory to execute a reputation score system to;

scan a profile area of an application operating in a social networking service and generate a profile metric based on content of the profile area, wherein the social networking service comprises an online platform;

analyze application installation behavior of the application and generate an installation metric, wherein the installation metric is based on at least one of a setting change or a permission change, made by the application to a user profile space, during installation of the application;

analyze application activity of the application and generate an application metric, wherein analyzing the application activity of the application comprises;

determining a purpose of the application based on a description of the application; and

assessing whether the activity of the application exceeds the purpose of the application;

analyze permissions requested by the application and generate a permissions metric, wherein the permissions metric is based on at least one of the following permissions;

accessing a user'"'"'s social networking service friend list, posting on a friend'"'"'s social networking service wall without user consent, messaging to all user social networking service contacts without user consent, or requesting social networking service chat permissions; and

generate a reputation score based on the profile metric, installation metric, application metric, and permissions metric.

9. The computing system of claim 8, wherein the reputation score system is further configured to identify the application as a secure application if the reputation score is one of greater than or less than a threshold score.

10. The computing system of claim 9, wherein the reputation score system IS further configured to block a user from installing the application if the reputation score IS indicative of a malicious application.

11. The computing system of claim 9, wherein the reputation score is a sum of the profile metric, installation metric, application metric, and permissions metric.

12. The computing system of claim 9, wherein the reputation score system is further configured to notify a user of the reputation score of the application.

13. The computing system of claim 8, wherein the reputation score system is further configured to maintain a data store comprising a plurality of application reputation scores.

14. The computing system of claim 13, further comprising installing, if the application is not in the data store, the application in the profile area.

15. A non-transitory computer readable storage medium including instructions that, when executed by a processor, cause the processor to perform operations comprising:

scanning a profile area of an application operating in a social networking service and generating a profile metric based on content of the profile area, wherein the social networking service comprises an online platform;

analyzing application installation behavior of the application and generating an installation metric, wherein the installation metric is based on at least one of a setting change or a permission change, made by the application to a user profile space, during installation of the application;

analyzing application activity of the application and generating an application metric, wherein analyzing the application activity of the application comprises;

determining a purpose of the application based on a description of the application; and

assessing whether the activity of the application exceeds the purpose of the application;

analyzing permissions requested by the application and generating a permissions metric, wherein the permissions metric is based on at least one of the following permissions;

accessing a user'"'"'s social networking service friend list, posting on a friend'"'"'s social networking service wall without user consent, messaging to all user social networking service contacts without user consent, or requesting social networking service chat permissions; and

generating a reputation score based on the profile metric, installation metric, application metric, and permissions metric.

16. The computer readable storage medium of claim 15, wherein the operations further comprise identifying the application as a secure application if the reputation score is one of greater than or less than a threshold score.

17. The computer readable storage medium of claim 16, wherein the operations further comprise alerting a user about the application or blocking the user from installing the application if the reputation score is indicative of a malicious application.

18. The computer readable storage medium of claim 16, wherein the reputation score is a sum of the profile metric, installation metric, application metric and permissions metric.

19. The computer readable storage medium of claim 15, further comprising maintaining a data store comprising a plurality of application reputation scores.

20. The computer readable storage medium of claim 19, further comprising installing, if the application is not in the data store, the application in the profile area.