The invention provides a method for verifying and monitoring mobile application security in a BYOD environment. The method includes: setting an association node for a mobile device, wherein the association node is corresponding to one record; describing and storing a strategy specification; modeling a mobile application, and using a model verifying method to perform static detection on the mobile application; and performing dynamic monitoring on the mobile application after static detection fails, and ending a flow after detection of all the mobile applications are completed. The technical scheme uses a dynamic and static combination technique, and can ensure the security of mobile applications and enterprise data resources in the BYOD environment.