7. A method of using information on malicious application behavior in a device, the method comprising: monitoring, by the device, at least one of application behaviors and application capabilities of a malicious application; generating, by the device, a document in a formal language specifying the at least one of the monitored application capabilities and the application behaviors; controlling, by the device, execution of the malicious application using the generated document in the formal language; and transmitting the generated document in the formal language to other devices, wherein the application is a previously generated malicious application received by the device.
7. A method of using information on malicious application behavior in a device, the method comprising: monitoring, by the device, at least one of application behaviors and application capabilities of a malicious application; generating, by the device, a document in a formal language specifying the at least one of the monitored application capabilities and the application behaviors; controlling, by the device, execution of the malicious application using the generated document in the formal language; and transmitting the generated document in the formal language to other devices, wherein the application is a previously generated malicious application received by the device. 8. The method of claim 7 , wherein the application capabilities comprise the capability of the application to utilize or control resources of the device.