主权项 |
1. A system for automated classification of applications (“apps”) for mobile devices, comprising:
a processor configured to:
receive an application (“app”);perform an analysis of the app using a classification engine, comprising to:
extract data from the app, the data including an image, a string, a keyword and phrase, an uniform resource locator (URL), an email address, a phone number, a database, a Software Development Kit (SDK) in use, or any combination thereof;determine an app category for the app based on the analysis performed using the classification engine, comprising to:
determine the app category for the app based on the extracted data;compare a category of an associated market page from which the app was downloaded from an app store and the determined app category for the app;in the event that the category of the associated market page and the determined app category for the app are different, send a request to the app store to re-categorize the category of the associated market page in the app store to a category corresponding to the determined app category; anddetermine whether the app is to be placed on a blacklist with respect to the determined app category based on the determined app category, comprising to:
compare app behavior with a list of unsafe behaviors associated with the app category, wherein:
at least one behavior is in a list of unsafe behaviors associated with a first app category:the same at least one behavior is in a list of safe behaviors associated with a second app category; andthe first app category is different from the second app category;in the event that the app behavior matches a behavior on the list of unsafe behaviors associated with the app category, classify the app to be placed on the blacklist with respect to the app category; andin the event that the app behavior matches a behavior on the list of safe behaviors associated with the app category, classify the app to be placed on a whitelist with respect to the app category; and a memory coupled to the processor and configured to provide the processor with instructions. |