{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,7,22]],"date-time":"2024-07-22T09:14:18Z","timestamp":1721639658062},"reference-count":35,"publisher":"Association for Computing Machinery (ACM)","issue":"2","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2008,8]]},"abstract":"<jats:p>\n            Several data management challenges arise in the context of Internet advertising networks, where Internet advertisers pay Internet publishers to display advertisements on their Web sites and drive traffic to the advertisers from surfers' clicks. Although advertisers can target appropriate market segments, the model allows dishonest publishers to defraud the advertisers by simulating fake traffic to their own sites to claim more revenue. This paper addresses the case of publishers launching fraud attacks from numerous machines, which is the most widespread scenario. The difficulty of uncovering these attacks is proportional to the number of machines and resources exploited by the fraudsters. In general, detecting this class of fraud entails solving a new data mining problem, which is finding correlations in multidimensional data. Since the dimensions have large cardinalities, the search space is huge, which has long allowed dishonest publishers to\n            <jats:italic>inflate<\/jats:italic>\n            their traffic, and deplete the advertisers' advertising budgets. We devise the approximate SLEUTH algorithms to solve the problem efficiently, and uncover single-publisher frauds. We demonstrate the effectiveness of SLEUTH both analytically and by reporting some of its results on the Fastclick network, where numerous fraudsters were discovered.\n          <\/jats:p>","DOI":"10.14778\/1454159.1454161","type":"journal-article","created":{"date-parts":[[2014,6,24]],"date-time":"2014-06-24T12:17:57Z","timestamp":1403612277000},"page":"1217-1228","source":"Crossref","is-referenced-by-count":20,"title":["SLEUTH"],"prefix":"10.14778","volume":"1","author":[{"given":"Ahmed","family":"Metwally","sequence":"first","affiliation":[{"name":"University of California at Santa Barbara, Santa Barbara, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fatih","family":"Emek\u00e7i","sequence":"additional","affiliation":[{"name":"Linkedln LTD, Mountain View, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Divyakant","family":"Agrawal","sequence":"additional","affiliation":[{"name":"University of California at Santa Barbara, Santa Barbara, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amr","family":"El Abbadi","sequence":"additional","affiliation":[{"name":"University of California at Santa Barbara, Santa Barbara, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2008,8]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00023-7"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/362686.362692"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/568760.568871"},{"key":"e_1_2_1_4_1","first-page":"56","volume-title":"Privacy. In Proceedings of the 1st WEBKDD International Workshop on Web Usage Analysis and User Profiling","author":"Broder A.","year":"1999"},{"key":"e_1_2_1_5_1","unstructured":"CERT Coordination Center. CERT Advisory CA-1996-21 TCP SYN Flooding and IP Spoofing Attacks. http:\/\/www.cert.org\/advisories\/CA-1996-21.html September 19 1996.  CERT Coordination Center. CERT Advisory CA-1996-21 TCP SYN Flooding and IP Spoofing Attacks. http:\/\/www.cert.org\/advisories\/CA-1996-21.html September 19 1996."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/646255.684566"},{"key":"e_1_2_1_7_1","volume-title":"Proceedings of the 1st USENIX SRUTI Workshop on Steps to Reducing Unwanted Traffic on the Internet","author":"Cooke E.","year":"2005"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/1315451.1315492"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1007568.1007588"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/773153.773182"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/647912.740658"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/859716.859719"},{"key":"e_1_2_1_13_1","unstructured":"S. Goo. 'Click Fraud' Threatens Foundation of Web Ads. Washington Post Magazine October 22 2006.  S. Goo. 'Click Fraud' Threatens Foundation of Web Ads. Washington Post Magazine October 22 2006."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00041-9"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/956863.956918"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/762471.762473"},{"key":"e_1_2_1_17_1","volume-title":"Proceedings of the ECML\/PKD Workshop on Data Mining for Marketing Applications","author":"Kerkhofs J.","year":"2001"},{"key":"e_1_2_1_18_1","first-page":"81","volume-title":"Proceedings of the 1st USENIX ID Workshop on Intrusion Detection and Network Monitoring","author":"Klein D.","year":"1999"},{"key":"e_1_2_1_19_1","article-title":"Google to Pay $90M in 'Click Fraud' Case","author":"Liedtke M.","year":"2006","journal-title":"Washington Post Magazine"},{"key":"e_1_2_1_20_1","unstructured":"M. Liedtke. Yahoo Settles 'Click Fraud' Lawsuit. MSNBC News June 28 2006.  M. Liedtke. Yahoo Settles 'Click Fraud' Lawsuit. MSNBC News June 28 2006."},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.36"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.5555\/1287369.1287400"},{"key":"e_1_2_1_23_1","article-title":"How Click Fraud Could Swallow the Internet","author":"Mann C.","year":"2006","journal-title":"Wired Magazine"},{"key":"e_1_2_1_24_1","article-title":"Insights From the Front Line, Part 2","author":"Mason N.","year":"2008","journal-title":"ClickZ News"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1060745.1060753"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1166074.1166084"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.5555\/1083592.1083615"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242606"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2007.124"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0054155"},{"key":"e_1_2_1_31_1","article-title":"Click Fraud Roils Search Advertisers","author":"Olsen S.","year":"2005","journal-title":"CNET News"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/356616.356618"},{"key":"e_1_2_1_33_1","first-page":"155","volume-title":"Proceedings of the 3rd USENIX Workshop on Electronic Commerce","author":"Reiter M.","year":"1998"},{"key":"e_1_2_1_34_1","unstructured":"D. Vise. Clicking To Steal. Washington Post Magazine page F01 April 17 2005.  D. Vise. Clicking To Steal. Washington Post Magazine page F01 April 17 2005."},{"key":"e_1_2_1_35_1","volume-title":"The New York Times","author":"Jr T. Zeller","year":"2004"}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/1454159.1454161","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,28]],"date-time":"2022-12-28T09:58:49Z","timestamp":1672221529000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/1454159.1454161"}},"subtitle":["Single-pubLisher attack dEtection Using correlaTion Hunting"],"short-title":[],"issued":{"date-parts":[[2008,8]]},"references-count":35,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2008,8]]}},"alternative-id":["10.14778\/1454159.1454161"],"URL":"https:\/\/doi.org\/10.14778\/1454159.1454161","relation":{},"ISSN":["2150-8097"],"issn-type":[{"value":"2150-8097","type":"print"}],"subject":[],"published":{"date-parts":[[2008,8]]}}}