1. A method of developing a feature data store that describes one or more applications and is adapted for use in the detection of malware in a target application on a limited access platform, said method comprising: creating one or more feature sets, each feature set comprising a plurality of feature elements for a select application of the one or more applications, each said feature element defining a non-executable portion of said select application; characterizing each feature set for a respective select application as either malware-infected or malware-free; and defining a rule for said one or more feature sets, said rule adapted to determine a match to one or more of said feature sets, such that when said rule is applied to a feature set of the target application, said match indicates whether said feature set of the target application matches at least one of said feature sets and said match further indicates whether said target application is malware-infected or malware-free.