Methods and systems for blocking potentially harmful communications to improve the functioning of an electronic device

1. A method for blocking, by an electronic device, a communication from an application, the communication transmitted to the electronic device using a first network connection, the method comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication from the application;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison according to the policy, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application according to the policy, the local device proxy on the electronic device to block the communication from proceeding past the local device proxy to the remainder of the electronic device.

2. The method of claim 1 , wherein the electronic device includes a mobile communications device or an internet-of-things device.

3. The method of claim 1 , wherein the security component is a component of the local device proxy.

4. The method of claim 1 , wherein the security component uses an inter-process communication in instructing the local device proxy to block the communication from the first application.

5. The method of claim 1 , wherein:

the security component is executing on a server.

6. The method of claim 1 , wherein the policy configured by the administrator was created by:

the administrator receiving, from a software component executing on a server, the set of questions;

the administrator providing, to the software component, the answers to the set of questions; and

based on the answers received from the administrator, the software component configuring the policy.

7. The method of claim 1 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to information associated with a first potentially harmful application from a plurality of potentially harmful applications, the comparison producing a value corresponding to a degree the obtained information matches the information associated with the first potentially harmful application; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from the first potentially harmful application when the comparison value exceeds a threshold value.

8. The method of claim 1 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to behavioral characteristics of potentially harmful applications, the behavioral characteristics specified by the policy, the comparison producing a value corresponding to a degree the obtained information matches the behavioral characteristics of potentially harmful applications; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from a potentially harmful application when the comparison value exceeds a threshold value.

9. A method for blocking, by an electronic device, a communication from an application installed on the electronic device, the application attempting to transmit the communication using a first network connection, the method comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication from the application;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison according to the policy, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application according to the policy, the local device proxy on the electronic device to block the communication from proceeding past the local device proxy to the remainder of the electronic device.

10. The method of claim 9 , wherein the electronic device includes a mobile communications device or an internet-of-things device.

11. The method of claim 9 , wherein:

the security component is executing on a server.

12. The method of claim 9 , wherein the policy configured by the administrator was created by:

the administrator receiving, from a software component executing on a server, the set of questions;

the administrator providing, to the software component, the answers to the set of questions; and

based the answers received from the administrator, the software component configuring the policy.

13. The method of claim 9 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to information associated with a first potentially harmful application from a plurality of potentially harmful applications, the comparison producing a value corresponding to a degree the obtained information matches the information associated with the first potentially harmful application; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from the first potentially harmful application when the comparison value exceeds a threshold value.

14. The method of claim 9 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to behavioral characteristics of potentially harmful applications, the behavioral characteristics specified by the policy, the comparison producing a value corresponding to a degree the obtained information matches the behavioral characteristics of potentially harmful applications; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from a potentially harmful application when the comparison value exceeds a threshold value.

15. A method for blocking, by an electronic device, a communication from a first application installed on the electronic device to a second application installed on the electronic device, the method comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application, the local device proxy to block the communication from proceeding to the second application.

16. The method of claim 15 , wherein the electronic device includes a mobile communications device or an internet-of-things device.

17. The method of claim 15 , wherein:

the security component is executing on a server.

18. The method of claim 15 , wherein the policy configured by the administrator was created by:

the administrator receiving, from a software component executing on a server, the set of questions;

the administrator providing, to the software component, the answers to the set of questions; and

based on the answers received from the administrator, the software component configuring the policy.

19. The method of claim 15 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to information associated with a first potentially harmful application from a plurality of potentially harmful applications, the comparison producing a value corresponding to a degree the obtained information matches the information associated with the first potentially harmful application; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from the first potentially harmful application when the comparison value exceeds a threshold value.

20. The method of claim 15 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to behavioral characteristics of potentially harmful applications, the behavioral characteristics being specified by the policy, the comparison producing a value corresponding to a degree the obtained information matches the behavioral characteristics of potentially harmful applications; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from a potentially harmful application when the comparison value exceeds a threshold value.

21. A non-transitory, computer-readable storage medium having stored thereon a plurality of instructions, which, when executed by a processor of an electronic device, cause the electronic device to perform actions for blocking a communication from an application, the communication transmitted to the electronic device using a first network connection, the actions comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving, over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication from the application;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison according to the policy, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application according to the policy, the local device proxy on the electronic device to block the communication from proceeding past the local device proxy to the remainder of the electronic device.

22. The computer-readable storage medium of claim 21 , wherein the policy configured by the administrator was created by:

the administrator receiving, from a software component executing on a server, the set of questions;

the administrator providing, to the software component, the answers to the set of questions; and

based on the answers received from the administrator, the software component configuring the policy.

23. The computer-readable storage medium of claim 21 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to behavioral characteristics of potentially harmful applications, the behavioral characteristics specified by the policy, the comparison producing a value corresponding to a degree the obtained information matches the behavioral characteristics of potentially harmful applications; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from a potentially harmful application when the comparison value exceeds a threshold value.

24. A non-transitory, computer-readable storage medium having stored thereon a plurality of instructions, which, when executed by a processor of an electronic device, cause the electronic device to perform actions for blocking a communication from an application installed on the electronic device, the application attempting to transmit the communication using a first network connection, the actions comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication from the application;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison according to the policy, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application according to the policy, the local device proxy on the electronic device to block the communication from proceeding past the local device proxy to the remainder of the electronic device.

25. A non-transitory, computer-readable storage medium having stored thereon a plurality of instructions, which, when executed by a processor of an electronic device, cause the electronic device to perform actions for blocking a communication from a first application installed on the electronic device to a second application installed on the electronic device, the actions comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application, the local device proxy to block the communication from proceeding to the second application.

26. The computer-readable storage medium of claim 25 , wherein the policy configured by the administrator was created by:

the administrator receiving, from a software component executing on a server, the set of questions;

the administrator providing, to the software component, the answers to the set of questions; and

based on the answers received from the administrator, the software component configuring the policy.

27. The computer-readable storage medium of claim 25 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to information associated with a first potentially harmful application from a plurality of potentially harmful applications, the comparison producing a value corresponding to a degree the obtained information matches the information associated with the first potentially harmful application; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from the first potentially harmful application when the comparison value exceeds a threshold value.

28. The computer-readable storage medium of claim 25 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to behavioral characteristics of potentially harmful applications, the behavioral characteristics being specified by the policy, the comparison producing a value corresponding to a degree the obtained information matches the behavioral characteristics of potentially harmful applications; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from a potentially harmful application when the comparison value exceeds a threshold value.

29. A system, comprising an electronic device with at least one processor and memory and instructions that when executed by the at least one processor cause the electronic device to perform actions for blocking a communication from an application, the communication transmitted to the electronic device using a first network connection, the actions comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving, over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication from the application;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison according to the policy, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application according to the policy, the local device proxy on the electronic device to block the communication from proceeding past the local device proxy to the remainder of the electronic device.

30. The system of claim 29 , wherein the policy configured by the administrator was created by:

the administrator receiving, from a software component executing on a server, the set of questions;

the administrator providing, to the software component, the answers to the set of questions; and

based on the answers received from the administrator, the software component configuring the policy.

31. The system of claim 29 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to behavioral characteristics of potentially harmful applications, the behavioral characteristics specified by the policy, the comparison producing a value corresponding to a degree the obtained information matches the behavioral characteristics of potentially harmful applications; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from a potentially harmful application when the comparison value exceeds a threshold value.

32. A system, comprising an electronic device with at least one processor and memory and instructions that when executed by the at least one processor cause the electronic device to perform actions for blocking a communication from an application installed on the electronic device, the application attempting to transmit the communication using a first network connection, the actions comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication from the application;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison according to the policy, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application according to the policy, the local device proxy on the electronic device to block the communication from proceeding past the local device proxy to the remainder of the electronic device.

33. A system, comprising an electronic device with at least one processor and memory and instructions that when executed by the at least one processor cause the electronic device to perform actions for blocking a communication from a first application installed on the electronic device to a second application installed on the electronic device, the actions comprising:

receiving, by a security component, a policy configured by an administrator, the policy pertaining to the processing of communications by the security component and based on answers of the administrator to a set of questions;

receiving over the first network connection or a second network connection, by the security component according to the policy and from a local device proxy on the electronic device after the communication is received by the local device proxy, information pertaining to the communication;

comparing, by the security component according to the policy, the obtained information to information associated with potentially harmful applications;

determining, by the security component from the comparison, that the communication is from a potentially harmful application; and

instructing, by the security component as a result of the determination that the communication is from a potentially harmful application, the local device proxy to block the communication from proceeding to the second application.

34. The system of claim 33 , wherein the policy configured by the administrator was created by:

the administrator receiving, from a software component executing on a server, the set of questions;

the administrator providing, to the software component, the answers to the set of questions; and

based on the answers received from the administrator, the software component configuring the policy.

35. The system of claim 33 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to information associated with a first potentially harmful application from a plurality of potentially harmful applications, the comparison producing a value corresponding to a degree the obtained information matches the information associated with the first potentially harmful application; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from the first potentially harmful application when the comparison value exceeds a threshold value.

36. The system of claim 33 ,

wherein the comparing the obtained information to information associated with potentially harmful applications comprises:

comparing the obtained information to behavioral characteristics of potentially harmful applications, the behavioral characteristics being specified by the policy, the comparison producing a value corresponding to a degree the obtained information matches the behavioral characteristics of potentially harmful applications; and

wherein the determining that the communication is from a potentially harmful application comprises:

determining that the communication is from a potentially harmful application when the comparison value exceeds a threshold value.