DETECTING SUSPICIOUS ACTIVATION OF AN APPLICATION IN A COMPUTER DEVICE

A computer-based system and method for detecting suspicious activation of an application in a computer device, including: monitoring physical activation events by the computer device; identifying a software activation event in the computer device; determining whether a physical activation event corresponding to the software activation event has been detected; and determining that the software activation event is legitimate if the corresponding physical activation event has been detected at the computer device and determining that the software activation event is suspicious otherwise. The physical activation events may be touch events and the software activation event may be a click event