Abstract
Click fraud—malicious clicks at the expense of pay-per-click advertisers—is posing a serious threat to the Internet economy. Although click fraud has attracted much attention from the security community, as the direct victims of click fraud, advertisers still lack effective defense to detect click fraud independently. In this paper, we propose a novel approach for advertisers to detect click frauds and evaluate the return on investment (ROI) of their ad campaigns without the helps from ad networks or publishers. Our key idea is to proactively test if visiting clients are full-fledged modern browsers and passively scrutinize user engagement. In particular, we introduce a new functionality test and develop an extensive characterization of user engagement. Our detection can significantly raise the bar for committing click fraud and is transparent to users. Moreover, our approach requires little effort to be deployed at the advertiser side. To validate the effectiveness of our approach, we implement a prototype and deploy it on a large production website; and then we run 10-day ad campaigns for the website on a major ad network. The experimental results show that our proposed defense is effective in identifying both clickbots and human clickers, while incurring negligible overhead at both the server and client sides.
Chapter PDF
Similar content being viewed by others
References
Daswani, N., Stoppelman, M.: The anatomy of clickbot.a. In: Proceedings of the Workshop on Hot Topics in Understanding Botnets (2007)
Dave, V., Guha, S., Zhang, Y.: Measuring and fingerprinting click-spam in ad networks. In: Proceedings of the Annual Conference of the ACM Special Interest Group on Data Communication (2012)
Miller, B., Pearce, P., Grier, C., Kreibich, C., Paxson, V.: What’s clicking what? techniques and innovations of today’s clickbots. In: Holz, T., Bos, H. (eds.) DIMVA 2011. LNCS, vol. 6739, pp. 164–183. Springer, Heidelberg (2011)
Alrwais, S.A., Dun, C.W., Gupta, M., Gerber, A., Spatscheck, O., Osterweil, E.: Dissecting ghost clicks: Ad fraud via misdirected human clicks. In: Proceedings of the Annual Computer Security Applications Conference (2012)
Li, Z., Zhang, K., Xie, Y., Yu, F., Wang, X.: Knowing your enemy: Understanding and detecting malicious web advertising. In: Proceedings of the ACM Conference on Computer and Communications Security (2012)
Metwally, A.: Sleuth: Single-publisher attack detection using correlation hunting. In: Proceedings of the International Conference on Very Large Data Bases (2008)
Metwally, A.: Detectives: Detecting coalition hit inflation attacks in advertising networks streams. In: Proceedings of the International Conference on World Wide Web (2007)
Metwally, A., Agrawal, D., Abbadi, A.E.: Duplicate detection in click streams. In: Proceedings of the International Conference on World Wide Web (2005)
Haddadi, H.: Fighting online click-fraud using bluff ads. In: ACM SIGCOMM Computer Communication Review (2010)
Daswani, N., Mysen, C., Rao, V., Weis, S., Gharachorloo, K., Ghosemajumder, S.: Online advertising fraud. In: Crimeware: Understanding New Attacks and Defenses. Addison-Wesley Professional (2008)
https://developer.yahoo.com/blogs/ydnfourblog/many-users-javascript-disabled-14121.html
Dave, V., Guha, S., Zhang, Y.: Viceroi: Catching click-spam in search ad networks. In: Proceedings of ACM Conference on Computer and Communications Security (2013)
Quinlan, J.: C4.5: Programs for machine learning. Morgan Kaufmann Publishers (1993)
Eckersley, P.: How unique is your web browser? In: Proceedings of the Privacy Enhancing Technologies Symposium (2010)
Yen, T.-F., Huang, X., Monrose, F., Reiter, M.K.: Browser fingerprinting from coarse traffic summaries: Techniques and implications. In: Flegel, U., Bruschi, D. (eds.) DIMVA 2009. LNCS, vol. 5587, pp. 157–175. Springer, Heidelberg (2009)
Schulte, B., Andrianakis, H., Sun, K., Stavrou, A.: Netgator: Malware detection using program interactive challenges. In: Flegel, U., Markatos, E., Robertson, W. (eds.) DIMVA 2012. LNCS, vol. 7591, pp. 164–183. Springer, Heidelberg (2013)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2014 Springer International Publishing Switzerland
About this paper
Cite this paper
Xu, H., Liu, D., Koehl, A., Wang, H., Stavrou, A. (2014). Click Fraud Detection on the Advertiser Side. In: Kutyłowski, M., Vaidya, J. (eds) Computer Security - ESORICS 2014. ESORICS 2014. Lecture Notes in Computer Science, vol 8713. Springer, Cham. https://doi.org/10.1007/978-3-319-11212-1_24
Download citation
DOI: https://doi.org/10.1007/978-3-319-11212-1_24
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-11211-4
Online ISBN: 978-3-319-11212-1
eBook Packages: Computer ScienceComputer Science (R0)