Protecting Internet users from becoming victimized attackers of click‐fraud. Issue 3 (24th April 2017)

• Record Type: Journal Article
• Authors: Iqbal, Md Shahrear; Zulkernine, Mohammad; Jaafar, Fehmi; Gu, Yuan
• Other Names: Babiceanu Radu guestEditor.; Waeselynck Hélène guestEditor.
• Is Part Of: Journal of software. Volume 30:Issue 3(2018)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2017-04-24
• Subjects: click‐fraud -- malware detection -- online advertising; Software engineering -- Periodicals; Computer software -- Development -- Periodicals; Software maintenance -- Periodicals; 005.1
• DOI: 10.1002/smr.1871
• Languages: English
• ISSNs: 2047-7473

Abstract

Abstract: Internet users are often victimized by malicious attackers. Some attackers infect and use innocent users' machines to launch large‐scale attacks without the users' knowledge. One of such attacks is the click‐fraud attack. Click‐fraud happens in pay‐per‐click ad networks where the ad network charges advertisers for every click on their ads. Click‐fraud has been proved to be a serious problem for the online advertisement industry. In a click‐fraud attack, a user or an automated software clicks on an ad with a malicious intent and advertisers need to pay for those valueless clicks. Among many forms of click‐fraud, botnets with the automated clickers are the most severe ones. In this study, we present a method for detecting automated clickers from the user side. The proposed method to fight click‐fraud, FCFraud, can be integrated into the desktop and smart device operating systems. Since most modern operating systems already provide some kind of antimalware service, our proposed method can be implemented as a part of the service. We believe that an effective protection at the operating system level can save billions of dollars of the advertisers. Experiments show that FCFraud is 99.6% (98.2% in mobile ad library–generated traffic) accurate in classifying ad requests from all user processes and it is 100% successful in detecting clickbots in both desktop and mobile devices. We implement a cloud backend for the FCFraud service to save battery power in mobile devices. The overhead of executing FCFraud is also analyzed and we show that it is reasonable for both the platforms. Abstract : Internet attackers are increasingly trying to control innocent users' machines to avoid legal consequences. In this work, we study one of such attacks, namely, click fraud. We design and develop a method to thwart click fraud and propose to include it in the anti‐malware service of the operating systems. We show that our method is successful in detecting fraudulent click bots in both the desktop and mobile environment without any user intervention.