A system and method identifies mobile applications that can have an adverse effect on a mobile device or mobile network. In an implementation, a server monitors behavioral data relating to a mobile application and applies a model to determine if the application has an adverse effect or has the potential to cause an adverse effect on a mobile device or a network the mobile device may connect to. A mobile device may monitor behavioral data, apply a model to the data, and transmit a disposition to the server. The server may aggregate behavioral data or disposition information from multiple devices. The server may transmit or make available the disposition information to a subscriber through a web interface, API, email, or other mechanism. After identifying that an application may have an adverse effect, the server may enact corrective actions, such as generating device or network configuration data.

System and method for adverse mobile application identification

Embodiments are directed to a system and method for authenticating a user of a client computer making a request to a server computer providing access to a network resource through an authentication platform that issues a challenge in response to the request requiring authentication of the user identity through a reply from the client computer, determining one or more items of context information related to at least one of the user, the request, and the client computer, and determining a disposition of the request based on the reply and the one or more items of context information. The reply includes a user password and may be provided by an authorizing client device coupled to the client computer over a wireless communications link.

Multi-factor authentication and comprehensive login system for client-server networks

The present invention is a system and method for detecting and preventing attacks and malware on mobile devices such as a cell phones, smartphones or PDAs, which are significantly limited in power consumption, computational power, and memory. The invention enables mobile devices to analyze network data, executable data files, and non-executable data files in order to detect and prevent both known and unknown attacks and malware over vectors that are not typically protected by desktop and server security systems. Security analysis is performed by a combination of “known good,” “known bad,” and decision components. The invention identifies known good executables and/or known characteristics of network data or data files that must be present in order for the data to be considered good. Furthermore, known good and known bad identifier databases may be stored on a server which may be queried by a mobile device.

System and method for attack and malware prevention

Methods, devices and systems for detecting suspicious or performance-degrading mobile device behaviors intelligently, dynamically, and/or adaptively determine computing device behaviors that are to be observed, the number of behaviors that are to be observed, and the level of detail or granularity at which the mobile device behaviors are to be observed. The various aspects efficiently identify suspicious or performance-degrading mobile device behaviors without requiring an excessive amount of processing, memory, or energy resources.

Adaptive Observation of Behavioral Features on a Mobile Device

Application programs for mobile communication devices are stored in a data store. The applications may be collected from any number of different sources such as through an application programming interface (API), from web crawling, from users, or combinations of these. The applications are analyzed and the analysis results reported. The applications may be “continuously” analyzed so that any changes in assessments can be reported. If an application for which an analysis is sought is not in the data store, information about a different, but related application may be provided.

System and method for a scanning api

Systems and methods for monitoring mobile application activities for malicious traffic on a mobile device are disclosed. One embodiment of a method which can be implemented on a system includes, monitoring application activities of a mobile application on the mobile device, detecting, from the application activities, suspicious activity, and/or blocking traffic from which the suspicious activity is detected. One embodiment includes creating a policy based on the information aggregated from the multiple mobile devices and/or broadcasting the policy to other mobile devices of the suspicious activity detected from the multiple mobile devices.

Monitoring mobile application activities for malicious traffic on a mobile device

Systems and methods for a mobile device to use physical storage of another device for caching are disclosed. In one embodiment, a mobile device is able to receive over a cellular or IP network a response or content to be cached and wirelessly access the physical storage of the other device via a wireless network to cache the response or content for the mobile device.

System and method for a mobile device to use physical storage of another device for caching

Mobile network reporting and usage analytics system and method are disclosed. One embodiment includes a method generating a report for a network operator, which may be implemented on a system, including tracking optimization efficiency for traffic in a wireless network, generating the report to be provided to the network operator based on the optimization efficiency and performing functions related to traffic optimization and management in the wireless network effectuating in traffic alleviation in the wireless network measured by the optimization frequency. The optimization efficiency can include efficiency information associated with different mobile applications and user-related information in a wireless network.

Mobile network reporting and usage analytics system and method aggregated using a distributed traffic optimization system

Systems and methods of social caching for device resource sharing and management are disclosed. In one embodiment, a system includes a local proxy which wirelessly accesses the physical storage of other device via a wireless network to cache the response or content for the mobile device, in response to detecting commonalities between the mobile device and the other device. The commonalities can include, for example, common interests in users of the mobile device and the other device

Social caching for device resource sharing and management

Systems and methods of dynamic categorization of applications for network use and access in a mobile network are disclosed. Using application profile information, applications can be categorized into one of multiple categories that define restrictions on the application's access to the wireless network or cellular network. One example of such categories is the concept of black, white and grey listings. The “white” listed applications may be always allowed access, “black” listed application may never or almost never be granted network access (e.g., application may be malware like or otherwise consumes large amounts of network/device resources), and grey listed applications may be granted access based on one or more criteria.

Ross Bott

Papers

Monitoring mobile application activities for malicious traffic on a mobile device

System and method for a mobile device to use physical storage of another device for caching

Mobile network reporting and usage analytics system and method aggregated using a distributed traffic optimization system

Social caching for device resource sharing and management

Dynamic categorization of applications for network access in a mobile network