Abstract: A policy file and a mapping file are fetched from a policy server responsive to a defined event associated with execution of an application by a mobile device. The policy file contains policy events that define features of the mobile device that the application is allowed to access. The mapping file defines associations between the features of the mobile device and the policy events. The policy file and the mapping file are locally saved in a local memory of the mobile device. A policy evaluation request is received that identifies a feature of the mobile device that the application will invoke. A policy event associated with the feature is identified based on content of the mapping file. The policy event associated with the feature is obtained from the policy file. Whether the application is allowed to invoke the feature is controlled based on evaluating whether the policy event is satisfied.

Abstract: A method includes receiving a notice of a policy violation of an enterprise usage policy by a managed application on a user device wherein the managed application is managed by a mobile application management module on the user device, retrieving the enterprise usage policy from a policy database. The method further includes determining a modification precedence of the active condition and the active restriction, selecting one of the active condition and the active restriction for modification in response to the modification precedence, modifying the selected one of the active condition and the active restriction in response to the notice of the policy violation to provide a modified enterprise usage policy, and transmitting the modified enterprise usage policy to the user device.

Abstract: A mobile device fetches a policy definition library from a policy server responsive to occurrence of a defined event associated with an application package. The policy definition library contains policies defining resources of the mobile device that the application package is permitted to access. The mobile device executes the wrapped application package containing application executable code and application wrapper executable code that is called by each execution of an agnostic wrapper function residing at each of a plurality of locations in the application executable code. Responsive to execution of the agnostic wrapper function at any of the plurality of locations in the application executable code, the mobile device executes the application wrapper executable code to control whether access by the application executable code is granted to resources of the mobile device based on the policies contained in the policy definition library.

Abstract: A method on a processor of an application wrapper computer includes, for each of a plurality of features of an application program in an application package, associating a wrapper component with the feature, identifying a location of the feature in the application program, and identifying from a portion of the application program at the location whether the feature will have an operational error during execution responsive to a request from the feature for access to a resource of a user device being blocked by the wrapper component. For each of the plurality of features, the method further responds to an operational error being identified by identifying content of an acceptable response to the request to avoid the operational error, and modifying the wrapper component to provide the content of the acceptable response to the request when the wrapper component is blocking the request from accessing the resource.

Abstract: For each of a plurality of wrapper logic components, a metric is determined from content of reports received from user electronic devices that characterizes performance of the wrapper logic component when executed by the user electronic devices to monitor a feature of an application during execution of the application by the user electronic devices. A set of the wrapper logic components is selected that excludes from the set any of the wrapper logic components having performance characterized by the metrics that does not satisfy a first defined rule. The set of wrapper logic components and the application are combined to form a modified application with the wrapper logic components of the set configured to monitor features of the modified application when executed by user electronic devices.

Abstract: A method for monitoring software application performance and one or more device states affecting a software application on a periodic basis on a mobile device. The method includes one or more computer processors identifying a software application on a mobile device. The method further includes the one or more computer processors identifying a plurality of sampling plans and one or more respective triggers within the plurality of sampling plans that are respectively associated with the software application and are stored on the mobile device. The method further includes the one or more computer processors determining a first value associated with the one or more respective triggers. The method further includes the one or more computer processors selecting a first sampling plan from the plurality of sampling plans for the software application based, at least in part, on the value associated with the one or more respective triggers.

Abstract: Methods and arrangements for rendering social proximity networks for mobile phones. A contemplated method includes: obtaining communication data for a mobile phone; deriving from the communication data a social proximity score with respect to at least one individual associated with at least one device that has communicated with the mobile phone; and storing the social proximity score. Other variants and embodiments are broadly contemplated herein.

Abstract: Executable code of an application package is decompiled to provide a decompiled application package. Features of the application package are identified based on content of the decompiled application package. A set of wrapper logic components are selected from among a library of wrapper logic components based on the features of the application package. The decompiled application package is disassembled to provide disassembled code. Wrapper program hooks are inserted into the disassembled code to provide modified disassembled code. The modified disassembled code is assembled to provide modified assembled code. The wrapper logic components of the set are combined with the modified assembled code to form a wrapped application package including executable code from the modified assembled code and executable code from the wrapper logic components of the set that intercept calls by the executable code from the modified assembled code.

Abstract: A method for monitoring software application performance and one or more device states affecting a software application on a periodic basis on a mobile device. The method includes one or more computer processors identifying a software application on a mobile device. The method further includes the one or more computer processors identifying a plurality of sampling plans and one or more respective triggers within the plurality of sampling plans that are respectively associated with the software application and are stored on the mobile device. The method further includes the one or more computer processors determining a first value associated with the one or more respective triggers. The method further includes the one or more computer processors selecting a first sampling plan from the plurality of sampling plans for the software application based, at least in part, on the value associated with the one or more respective triggers.

Abstract: A method for testing an application that invokes an application programming interface (API) comprises identifying signatures for APIs. A package associated with the API is identified in the application under test, and a package name of the API is identified in the signatures. During runtime of the application under test, request and response objects (or other objects) for the identified package are created using the package name and reflection. The created request object is then used to invoke the API to test the application under test and the response object is used to evaluate the response with expected response.

Abstract: A computer program product according to some embodiments causes a processor to perform operations including disassembling executable code of an application program to provide disassembled code, identifying first wrapping code in the disassembled code, receiving second wrapping code, generating a consolidated application wrapper that manages operation of both the first wrapping code and the second wrapping code, inserting the second wrapping code and the consolidated application wrapper into the disassembled code to form modified disassembled code, and assembling the modified disassembled code to form modified executable code.

Abstract: Methods and arrangements for testing mobile applications. A mobile application for testing is input at a mobile device. The mobile application is automatically tested using a test script, wherein the testing requires data from an out-of-band channel. The testing includes: invoking a listener module based on the mobile application; using the listener module to automatically obtain data from an out-of-band channel; and communicating the automatically obtained data to the mobile application. Other variants and embodiments are broadly contemplated herein.

Abstract: A method includes performing operations on a processor of an application analysis computer. The operations include receiving reports from user terminals containing identifiers for operational states of an application being processed by the user terminals and containing state performance metrics. Each of the state performance metrics indicates a measurement of performance for a corresponding identified one of the operational states of the application being processed by one of the user terminals. The operations further include, for each of the operational states of the application identified in the reports, generating a rule for acceptable performance of the operational state of the application based on the state performance metrics of the operational state reported by the user terminals. The operations further include storing in a repository the rules associated with identifiers for corresponding ones of the operational states of the application. Related operations by a user terminal are disclosed.

Abstract: A computer program product according to some embodiments causes a processor to perform operations including disassembling executable code of an application program to provide disassembled code, identifying first wrapping code in the disassembled code, receiving second wrapping code, generating a consolidated application wrapper that manages operation of both the first wrapping code and the second wrapping code, inserting the second wrapping code and the consolidated application wrapper into the disassembled code to form modified disassembled code, and assembling the modified disassembled code to form modified executable code.

Abstract: A method, process, and associated systems for policy-based development and runtime control of mobile applications. Security objects that describe or enforce security policies are embedded into the source code of an enhanced application while the application is being developed. When a user attempts to launch the enhanced application on a mobile device, the security objects are updated to match a latest valid version of the objects stored on an enterprise server. The security objects may be further updated at other times. Global security policies, which affect the entire enterprise and which may deny the application permission to launch, are enforced by a global security policy stored within one of the updated security objects. If the application does run, application-specific security policies contained in the updated security objects modify application behavior at runtime in order to enforce application-specific security policies.

Abstract: An OS API mapping computer operates to identify a set of OS APIs of a first OS version not present in a second OS version. OS APIs of the second OS version are identified that satisfy a defined rule for compatibility with the set of OS APIs of the first OS version not present in the second OS version. An OS APIs replacement list is generated that maps individual ones of the set of OS APIs of the first OS version, to corresponding ones of the OS APIs of the second OS version that satisfy the defined rule. A set is identified of OS APIs of an application that are in the OS APIs replacement list among the set of OS APIs of the first OS version. A plugin is generated based on the OS APIs of the second OS version mapped to the set of application OS APIs.

Abstract: A method includes performing operations on a processor of an application analysis computer. The operations include receiving state performance metrics reported by user terminals via a data network. Each of the state performance metrics indicating a measurement of performance of one of a plurality of operational states of an application processed by one of the user terminals. The operations further include determining when one of the state performance metrics reported by one of the user terminals violates a rule for acceptable operational state performance of the application, and communicating a response message to the one of the user terminals responsive to the determination that the one of the state performance metrics violates the rule. Related operations by a user terminal are disclosed.

Abstract: A machine-executable process comprises receiving a request to take a screenshot of a display and receiving page source information of the display. The page source information is compared to stored page source information of displays that have had a screenshot taken to determine whether a screenshot of the display has already been taken. If a screenshot has not already been taken of the display, then a screenshot is taken and the page source information of the display is added to the stored page source information.

Abstract: Methods, systems and computer program products for transferring data between mobile devices having heterogeneous wireless communication interfaces includes identifying one or more intermediate mobile devices from social network databases upon detecting an initiation of data transfer from a first mobile device to a second mobile device, wherein the first and second mobile devices have heterogeneous wireless communication interfaces, and wherein the intermediate mobile devices have wireless communication interface compatibility to form an ad hoc wireless network with the first and second mobile devices for transferring data from the first to the second mobile device; implementing the ad hoc wireless network based on availability of the intermediate mobile devices; and transferring the data from the first to the second mobile device through the ad hoc wireless network, wherein said transferring includes hopping the data through each of the intermediate mobile devices from the first to the second mobile device.

Abstract: A method, system and computer program product for controlling enterprise data on mobile devices. Data on a mobile device is tagged as being associated with either enterprise data or with personal data. Upon identifying the storage location of the tagged data and the identifier of the application that generated the tagged data, the tag, the storage location of the tagged data and the identifier of the application are stored in an index. A mobile agent residing on the mobile device may be directed by a mobile device management server of the enterprise to perform various actions (e.g., deleting, encrypting, backing-up) on the enterprise data using the index. In this manner, the enterprise has the ability to control their applications and data that resides on employees' mobile devices to ensure that such data is not lost or used in a manner that is contrary to the wishes of the employer.