Patent 9009822 was granted and assigned to FireEye on April, 2015 by the United States Patent and Trademark Office.
A method is described that includes 1 receiving one or more user provided rules for an application of a mobile device through a user interface. The method also includes generating a representation of the application that describes various states and state transitions of the application. The method also includes referring to the one or more rules and the representation to identify a region of interest of the application. The method also includes configuring one or more monitors for the application to be enabled in a run time environment of the application. The method also includes setting conditions of the application within the run time environment to drive the application's execution to the region of interest. The method also includes observing behavior of the application and determining whether the region of interest corresponds to improperly behaving code.