1. A method for malicious activity detection in a mobile station of a particular model, comprising: analyzing a mobile station activity observation using mobile-station-model-specific-behavior-analysis algorithms to generate an activity analysis, wherein the mobile-station-model-specific-behavior-analysis algorithms are generated in the mobile station based on generic malicious behavior patterns received from a network-based malicious behavior profiling system; and detecting malicious activity based on the activity analysis.