Using a honeypot workflow for software review

摘要

An application distribution server (102) may be operable to perform an application distribution process for an application, where the application distribution process may comprise a plurality of phases. The plurality of phases may comprise, in sequence, a developer account creation phase (302), a risk assessment phase (304), an application upload phase (306), an application publication phase (308), an application promotion phase (310) and an application download phase (312). The application distribution server (102) may detect, at each of the plurality of phases, whether a particular behavior corresponding to use of the application to distribute undesirable software may occur. In instances when an occurrence of the particular behavior is detected at a certain phase in the application distribution process, the application distribution server (102) may continue, utilizing a trap system, one or more subsequent phases after the certain phase for the application, without communicating information on the detection of the occurrence of the particular behavior.