Abstract: Methods and system are disclosed that analyze a mobile app. In one aspect, an input including a URL address of the mobile app may be received. The URL address may correspond to the mobile app stored on a mobile application distribution platform. The mobile app may be downloaded from the URL address. Upon downloading the mobile app, a static analysis engine may be instantiated to perform static analysis of the mobile app. A dynamic analysis engine may be instantiated to perform a dynamic analysis of the mobile app. A location analysis engine may be instantiated to perform location analysis. Based on the results of the static analysis, dynamic analysis and location analysis, graphical visualizations may be generated. Based on the graphical visualizations, compliance or violation of data protection standards of the mobile app may be determined.

Abstract: Methods and system are disclosed that analyze a mobile app. In one aspect, an input including a URL address of the mobile app may be received. The URL address may correspond to the mobile app stored on a mobile application distribution platform. The mobile app may be downloaded from the URL address. Upon downloading the mobile app, a static analysis engine may be instantiated to perform static analysis of the mobile app. A dynamic analysis engine may be instantiated to perform a dynamic analysis of the mobile app. A location analysis engine may be instantiated to perform location analysis. Based on the results of the static analysis, dynamic analysis and location analysis, graphical visualizations may be generated. Based on the graphical visualizations, compliance or violation of data protection standards of the mobile app may be determined.

Abstract: A Policy Enforcement Point (PEP) enforcement module (100) comprises: a monitor (110), (120, 130, 140) for monitoring the output of a policy controlled module or PEP (200) operating within a distributed computer system and a correction performer module (150). The PEP (200) is associated with one or more policies (400) which are applied to the PEP. Each policy specifies a trigger event or events and an action or actions to be performed as a result of the trigger event occurring as well as expected output from the PEP (200) when it performs a specified action or actions. The monitor monitors output produced by the PEP (200) as a result of operating in compliance with a policy, and it compares the monitored output with one or more specified expected outputs specified in the policy.

Abstract: A Policy Enforcement Point (PEP) enforcement module (100) comprises: a monitor (110), (120, 130, 140) for monitoring the output of a policy controlled module or PEP (200) operating within a distributed computer system and a correction performer module (150). The PEP (200) is associated with one or more policies (400) which are applied to the PEP. Each policy specifies a trigger event or events and an action or actions to be performed as a result of the trigger event occurring as well as expected output from the PEP (200) when it performs a specified action or actions. The monitor monitors output produced by the PEP (200) as a result of operating in compliance with a policy, and it compares the monitored output with one or more specified expected outputs specified in the policy.

Abstract: A user authentication method for access to a mobile user terminal including one or more movement sensor supplying information on movements of the mobile terminal, includes authenticating a user on the basis of a movement performed handling the mobile terminal. A test pattern of values is sensed by one or more movement sensor related to a movement performed in a predetermined condition corresponding to an action for operating the mobile terminal. In a biometric recognition phase the acquired test pattern is compared to a stored pattern of values obtained from the one or more movement sensor by a training phase executed by an accepted user performing the action for operating the mobile terminal. The comparison includes measuring a similarity of the acquired test pattern to stored pattern. An authentication result is obtained by comparing the measured similarity to a threshold.

Abstract: A user authentication method for access to a mobile user terminal including one or more movement sensor supplying information on movements of the mobile terminal, includes authenticating a user on the basis of a movement performed handling the mobile terminal. A test pattern of values is sensed by one or more movement sensor related to a movement performed in a predetermined condition corresponding to an action for operating the mobile terminal. In a biometric recognition phase the acquired test pattern is compared to a stored pattern of values obtained from the one or more movement sensor by a training phase executed by an accepted user performing the action for operating the mobile terminal. The comparison includes measuring a similarity of the acquired test pattern to stored pattern. An authentication result is obtained by comparing the measured similarity to a threshold.