1. A system, comprising: a processor configured to: perform static analysis on a mobile device application using a static analysis engine to generate a static analysis report associated with the application, wherein the static analysis engine is configured to perform static analysis on the mobile device application at least in part by evaluating a set of static analysis rules; perform dynamic analysis of the application using a dynamic analysis engine, wherein the dynamic analysis is customized based on results of the static analysis; determine whether the application is malicious based at least on the dynamic analysis; and revise at least one static analysis rule included in the set of static analysis rules based on a result of the dynamic analysis; and a memory coupled to the processor and configured to provide the processor with instructions.