{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T16:47:05Z","timestamp":1781714825452,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":69,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100006374","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62325207, 62332013, 62302298"],"award-info":[{"award-number":["62325207, 62332013, 62302298"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3670314","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"2963-2977","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Unveiling Collusion-Based Ad Attribution Laundering Fraud: Detection, Analysis, and Security Implications"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-7171-6767","authenticated-orcid":false,"given":"Tong","family":"Zhu","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2428-3044","authenticated-orcid":false,"given":"Chaofan","family":"Shou","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-0750-6601","authenticated-orcid":false,"given":"Zhen","family":"Huang","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8107-5909","authenticated-orcid":false,"given":"Guoxing","family":"Chen","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4646-7146","authenticated-orcid":false,"given":"Xiaokuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5445-0347","authenticated-orcid":false,"given":"Yan","family":"Meng","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2756-6015","authenticated-orcid":false,"given":"Shuang","family":"Hao","sequence":"additional","affiliation":[{"name":"University of Texas at Dallas, Richardson, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5079-4556","authenticated-orcid":false,"given":"Haojin","family":"Zhu","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Adcolony. 2023. Adcolony ad setup. https:\/\/support.adcolony.com\/helpdesk\/ad colony-android-sdk\/. (2023)."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833633"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2901739.2903508"},{"key":"e_1_3_2_1_4_1","unstructured":"AppBrain. 2023. Android ad network statistics and market share. https:\/\/www .appbrain.com\/stats\/libraries\/ad-networks. (2023)."},{"key":"e_1_3_2_1_5_1","unstructured":"AppInChina. 2023. How can you monetize your app or game in china with ads? https:\/\/www.appinchina.co\/services\/monetization\/ad-monetization\/. (2023)."},{"key":"e_1_3_2_1_6_1","unstructured":"Applovin. 2023. Applovin ad setup. https:\/\/dash.applovin.com\/documentation \/mediation\/android\/getting-started\/integration. (2023)."},{"key":"e_1_3_2_1_7_1","unstructured":"AppsFlyer. 2023. Appsflyer - appsflyer ad analytics. https:\/\/www.appsflyer.com. (2023)."},{"key":"e_1_3_2_1_8_1","unstructured":"AppsFlyer. 2023. Attribution fraud. https:\/\/www.appsflyer.com\/glossary\/attrib ution-fraud\/. (2023)."},{"key":"e_1_3_2_1_9_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Arp Daniel","year":"2022","unstructured":"Daniel Arp, Erwin Quiring, Feargus Pendlebury, Alexander Warnecke, Fabio Pierazzi, Christian Wressnegger, Lorenzo Cavallaro, and Konrad Rieck. 2022. Dos and don?ts of machine learning in computer security. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, (Aug. 2022), 3971--3988. isbn: 978--1--939133--31--1. https:\/\/www.usenix.org\/conf erence\/usenixsecurity22\/presentation\/arp."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053004"},{"key":"e_1_3_2_1_11_1","volume-title":"Top mobile ad networks","year":"2023","unstructured":"Buildfire. 2023. Top mobile ad networks (2023). https:\/\/buildfire.com\/mobile-a d-networks\/. (2023)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2879302"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2020.2966991"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866310"},{"key":"e_1_3_2_1_15_1","unstructured":"Fraudulent App com.koodroid.chicken. 2022. The configurations downloaded from the remote server. https:\/\/www.product.koodroid.com\/download\/check.php?pr=chicken&mt=5&new=true. (2022)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33167-1_3"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594368.2594391"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236045"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380402"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341161.3345306"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2018.2889495"},{"key":"e_1_3_2_1_22_1","unstructured":"Facebook. 2023. Facebook ad setup. https:\/\/developers.facebook.com\/docs\/aud ience-network\/setting-up\/ad-setup. (2023)."},{"key":"e_1_3_2_1_23_1","unstructured":"GOOGLE. 2023. Ad fraud. https:\/\/support.google.com\/googleplay\/android-dev eloper\/answer\/9969955?hl=en&ref_topic=9969691&sjid=10118054247325294 537-AP#zippy=%2Cexamples-of-common-violations. (2023)."},{"key":"e_1_3_2_1_24_1","unstructured":"GOOGLE. 2023. Find your app ids & ad unit ids. https:\/\/support.google.com\/ad mob\/answer\/7356431?hl=en. (2023)."},{"key":"e_1_3_2_1_25_1","unstructured":"OpenRTB Working Group. 2019. Iab tech lab authorized sellers for apps (appads. txt) version 1.0. iab tech lab. https:\/\/iabtechlab.com\/wp-content\/uploads\/2 019\/03\/appads.txt-v1.0-final-.pdf. (2019)."},{"key":"e_1_3_2_1_26_1","unstructured":"Huawei. [n. d.] Huawei ad setup. https:\/\/developer.huawei.com\/consumer\/en \/doc\/development\/HMSCore-Guides\/publisher-service-banner-00000010500 66915. ()."},{"key":"e_1_3_2_1_27_1","unstructured":"IAB. 2023. IAB Tech Lab. https:\/\/iabtechlab.com. (2023)."},{"key":"e_1_3_2_1_28_1","unstructured":"IAB. 2020. The iab europe guide to ad fraud. https:\/\/iabeurope.eu\/wp-content \/uploads\/2020\/12\/IAB-Europe-Guide-to-Ad-Fraud-1.pdf. (2020)."},{"key":"e_1_3_2_1_29_1","unstructured":"Inmobi. 2023. Inmobi ad setup. https:\/\/www.inmobi.com\/sdk. (2023)."},{"key":"e_1_3_2_1_30_1","unstructured":"Joongyum Kim Junghwan Park and Sooel Son. 2021. The abuser inside apps: finding the culprit committing mobile ad fraud. In NDSS."},{"key":"e_1_3_2_1_31_1","unstructured":"Jeffery Kline Aaron Cahn and Paul Barford. 2022. Placement laundering and the complexities of attribution in online advertising. arXiv preprint arXiv:2208.07310."},{"key":"e_1_3_2_1_32_1","unstructured":"Kodular. 2023. Kodular home. https:\/\/www.kodular.io\/. (2023)."},{"key":"e_1_3_2_1_33_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Pochat Victor Le","year":"2022","unstructured":"Victor Le Pochat, Laura Edelson, Tom Van Goethem, Wouter Joosen, Damon McCoy, and Tobias Lauinger. 2022. An audit of facebook?s political ad policy enforcement. In 31st USENIX Security Symposium (USENIX Security 22), 607-- 624."},{"key":"e_1_3_2_1_34_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Lee Hyunjoo","year":"2021","unstructured":"Hyunjoo Lee, Jiyeon Lee, Daejun Kim, Suman Jana, Insik Shin, and Sooel Son. 2021. AdCube: WebVR ad fraud and practical confinement of Third-Party ads. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, (Aug. 2021), 2543--2560. isbn: 978--1--939133--24--3. https:\/\/www.usenix.org\/conf erence\/usenixsecurity21\/presentation\/lee-hyunjoo."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3003571"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134021"},{"key":"e_1_3_2_1_37_1","volume-title":"11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14)","author":"Liu Bin","year":"2014","unstructured":"Bin Liu, Suman Nath, Ramesh Govindan, and Jie Liu. 2014. DECAF: detecting and characterizing ad fraud in mobile apps. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14). USENIX Association, Seattle, WA, (Apr. 2014), 57--70. isbn: 978--1--931971-09--6. https:\/\/www.usenix.o rg\/conference\/nsdi14\/technical-sessions\/presentation\/liu%5C_bin."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"crossref","unstructured":"Fang Liu Haipeng Cai GangWang Danfeng Yao Karim O Elish and Barbara G Ryder. 2017. Mr-droid: a scalable and prioritized analysis of inter-app communication risks. in 2017 ieee security and privacy workshops (spw). (2017).","DOI":"10.1109\/SPW.2017.12"},{"key":"e_1_3_2_1_39_1","unstructured":"Mintegral. 2023. Mintegral ad setup. https:\/\/www.mintegral.com\/. (2023)."},{"key":"e_1_3_2_1_40_1","unstructured":"MRC. 2020. Invalid traffic detection and filtration standards addendum. https: \/\/mediaratingcouncil.org\/sites\/default\/files\/Standards\/IVT%20Addendum%2 0Update%20062520.pdf. (2020)."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660369"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00073"},{"key":"e_1_3_2_1_43_1","unstructured":"Pixalate. 2023. Blocking using data feeds. https:\/\/www.pixalate.com\/knowledg ebase\/high-risk-app-lists. (2023)."},{"key":"e_1_3_2_1_44_1","unstructured":"ProGuard. 2023. How it works? https:\/\/www.guardsquare.com\/manual\/home. (2023)."},{"key":"e_1_3_2_1_45_1","unstructured":"QIMAI. 2023. Qimai. https:\/\/www.qimai.cn\/. (2023)."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.35"},{"key":"e_1_3_2_1_47_1","unstructured":"ronsource. 2023. Ronsource ad setup. https:\/\/developers.is.com\/ironsource-mobile\/android\/sdk-change-log\/. (2023)."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068843"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484547"},{"key":"e_1_3_2_1_50_1","volume-title":"Advertising services market size to grow by usd 188.92 billion from 2021 to","year":"2026","unstructured":"Technavio. 2023. Advertising services market size to grow by usd 188.92 billion from 2021 to 2026, driven by the growth in in-app advertising - technavio. https:\/\/www.prnewswire.com\/news-releases\/advertising-services-market-sizeto- grow-by-usd-188--92-billion-from-2021-to-2026--driven-by-the-growth-in-inapp- advertising?technavio-301788330.html. (2023)."},{"key":"e_1_3_2_1_51_1","volume-title":"en. https:\/\/developer.android.com\/stu dio\/test\/other-testing-tools\/monkey. (2023). Retrieved","author":"Monkey Application Exerciser","year":"2023","unstructured":"2023. UI\/Application Exerciser Monkey. en. https:\/\/developer.android.com\/stu dio\/test\/other-testing-tools\/monkey. (2023). Retrieved Apr. 8, 2023 from."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.5555\/781995.782008"},{"key":"e_1_3_2_1_53_1","unstructured":"Yash Vekaria Rishab Nithyanand and Zubair Shafiq. 2022. The inventory is dark and full of misinformation: understanding the abuse of ad inventory pooling in the ad-tech supply chain. arXiv preprint arXiv:2210.06654."},{"key":"e_1_3_2_1_54_1","unstructured":"VirusTotal. 2020. Virustotal. https:\/\/www.virustotal.com\/gui\/. (2020)."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815703"},{"key":"e_1_3_2_1_56_1","article-title":"Iafdroid: demystifying collusion attacks in android ecosystem via precise inter-app analysis","author":"Wang Bin","year":"2023","unstructured":"Bin Wang, Chao Yang, and Jianfeng Ma. 2023. Iafdroid: demystifying collusion attacks in android ecosystem via precise inter-app analysis. IEEE Transactions on Information Forensics and Security.","journal-title":"IEEE Transactions on Information Forensics and Security."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3183575"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23118"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3497765"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/3270101.3270109"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00105"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3412690"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663719"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445459"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3517745.3561460"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487850"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.61"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484546"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3476107"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670314","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3670314","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:17:39Z","timestamp":1755843459000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670314"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":69,"alternative-id":["10.1145\/3658644.3670314","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3670314","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}