LOCATION BASED PROCESS-MONITORING

摘要

Disclosed are systems, apparatus, devices, methods, computer program products, and other implementations, including a method that includes determining location of a device, and controlling monitoring of behavior of one or more processes executing on the device based on the determined location of the device to identify potential one or more security-risky processes from the monitored one or more executing processes. In some embodiments, controlling the monitoring of the behavior of the one or more processes may include one or more of, for example, adjusting frequency of the monitoring of the one or more processes based on the determined location of the device, adjusting level of detail obtained for the monitored behavior of the one or more processes based on the determined location of the device, and/or adjusting features being observed for the monitored one or more processes based on the determined location of the device.

主权项

1. A method comprising:
determining, by a mobile device, a location of the mobile device; determining, by the mobile device, a security type for an area corresponding to an identifiable geographic region for the determined location of the mobile device; controlling, by the mobile device, adjustable monitoring operations to monitor behavior of one or more processes executing on the mobile device based on the determined security type for the area, the adjustable monitoring operations configured to provide monitoring data for the one or more processes to identify potential one or more security-risky processes from the one or more processes; and classifying, by the mobile device, at least one of the one or more processes as being a risky or non-risky activity based, at least in part, on the monitoring data provided by the adjustable monitoring operations and the determined security type for the area.