Detecting application similarity
First Claim
Patent Images
1. A method comprising:
- selecting for analysis, by a computing device, an application;
monitoring, by the computing device, at least one of network behavior and system behavior of the application during execution of the application within a controlled environment;
identifying, based at least in part on at least one of the network behavior and the system behavior of the application, a group of application programming interfaces utilized by the application during execution;
determining, by the computing device and based on the group of application programming interfaces, that the application is undesired;
identifying a group of related applications that are each related to the application based on the group of application programming interfaces utilized by the application, wherein each related application of the group of related applications utilizes one or more application programming interfaces of the group of application programming interfaces utilized by the application, and wherein each related application of the group of related applications are available for download from an online application store that provides an interface for a plurality of mobile computing devices to download applications executable by the plurality of mobile computing devices; and
removing, from the online application store, the group of related applications.
2 Assignments
0 Petitions
Accused Products
Abstract
The subject matter of this disclosure can be implemented in, among other things, a method. In these examples, the method includes selecting for analysis by a computing device, an executable application, and identifying a group of application programming interfaces (APIs) utilized by the application when the application is executed. The method may also identifying a group of related applications that are each related to the application based on the group of APIs utilized by the application, wherein each related application of the group of related applications utilizes one or more APIs of the group of APIs utilized by the application.
30 Citations
19 Claims
-
1. A method comprising:
-
selecting for analysis, by a computing device, an application; monitoring, by the computing device, at least one of network behavior and system behavior of the application during execution of the application within a controlled environment; identifying, based at least in part on at least one of the network behavior and the system behavior of the application, a group of application programming interfaces utilized by the application during execution; determining, by the computing device and based on the group of application programming interfaces, that the application is undesired; identifying a group of related applications that are each related to the application based on the group of application programming interfaces utilized by the application, wherein each related application of the group of related applications utilizes one or more application programming interfaces of the group of application programming interfaces utilized by the application, and wherein each related application of the group of related applications are available for download from an online application store that provides an interface for a plurality of mobile computing devices to download applications executable by the plurality of mobile computing devices; and removing, from the online application store, the group of related applications. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17)
-
-
18. A computer-readable storage medium encoded with instructions for causing one or more programmable processors of a computing system to:
-
select for analysis, by the computing system, an application; monitor, by the computing system, at least one of network behavior and system behavior of the application during execution of the application within a controlled environment; identify, based at least in part on at least one of the network behavior and the system behavior of the application, a group of application programming interfaces utilized by the application during execution; determine, based on the group of application programming interfaces, that the application is undesirable; identify a group of related applications that are each related to the application based on the group of application programming interfaces utilized by the application, wherein each related application of the group of related applications utilizes one or more application programming interfaces of the group of application programming interfaces utilized by the application, and wherein each related application of the group of related applications are available for download from an online application store that provides an interface for a plurality of mobile computing devices to download applications executable by the plurality of mobile computing devices; and remove, from the online application store, the group of related applications.
-
-
19. A computing system comprising:
-
one or more programmable processors; an application analysis module executable by the one or more programmable processors to select an application for analysis, and monitor at least one of network behavior and system behavior of the application during execution of the application within a controlled environment, identify, based at least in part at least one of the network behavior and the system behavior of the application, a group of application programming interfaces utilized by the application during execution, determine, based on the group of application programming interfaces, that the application is undesired, identify a group of related applications that are each related to the application based on the group of application programming interfaces utilized by the application, wherein each application of the group of related applications utilizes one or more application programming interfaces of the group of application programming interfaces utilized by the application, and wherein each related application of the group of related applications are available for download from an online application store that provides an interface for a plurality of mobile computing devices to download applications executable by the plurality of mobile computing devices, and remove, from the online application store, the group of related applications.
-
Specification