Mobile Defense looks beyond individual apps for a complete view into the broader mobile threat landscape.

We start by analyzing each mobile application’s code, behavior, and dynamic operating attributes. Our powerful analysis engine checks for more than 1,000 malicious and privacy-leaking behaviors. The engine has sandboxed more than 20 million free and paid iOS and Android apps and assessed the reputation of more than 1 million app publishers. We also check publisher reputation, factoring in the historical risk of other apps from the same publisher.

From there, we examine how and where the app is communicating with the outside world—websites, servers, and third-party cloud services. Leveraging our global threat intelligence database, we correlate that traffic with a historical global database of malicious sites, servers, and command-and-control (C&C) networks. We flag and quarantine apps that connect to sites that host phishing or steal credentials, botnets or with servers hosted by cyber criminals.

Read More: Why App Stores Cannot Protect Enterprises from Malicious Apps