陳浩-Security and Privacy in Mobile Advertising-移動安全發(fā)展論壇_第1頁
陳浩-Security and Privacy in Mobile Advertising-移動安全發(fā)展論壇_第2頁
陳浩-Security and Privacy in Mobile Advertising-移動安全發(fā)展論壇_第3頁
陳浩-Security and Privacy in Mobile Advertising-移動安全發(fā)展論壇_第4頁
陳浩-Security and Privacy in Mobile Advertising-移動安全發(fā)展論壇_第5頁
已閱讀5頁，還剩31頁未讀， 繼續(xù)免費閱讀

下載本文檔

版權(quán)說明：本文檔由用戶提供并上傳，收益歸屬內(nèi)容提供方，若內(nèi)容存在侵權(quán)，請進行舉報或認領(lǐng)

文檔簡介

SecurityandPrivacyinMobileAdvertising

HaoChen

UniversityofCalifornia,

Davis

AdsaretheFinancialPillarofMobileComputing

Mostmobilesoftwareisfree.

?Android

?Mostapps

Wheredoesrevenuecome?

?In-apppurchase

?Ads

MobileAdsEcosystem

Parties

?Users

?Appdevelopers

?Adproviders

?Advertisers

SecurityProblems

?

?Appdevelopers:adrevenuediversionduetocloning

?Adproviders/advertisers:adfraud

AnatomyofMobileAdTraffic

AdRevenueDiversion

Cloningharmsappecosystem

?Developers:loserevenueandincentivestomakeapps

?Markets:pollutedsearchresults

?Users:difficulttofindhighqualityapps

AdRob

Goals

Characterizeclonedapps

?Market

?Appcategory

?Adprovider

Quantifyimpactondevelopers

?Lossofadrevenue

?Lossofuserbase

Dataset:265,000appsfrom17markets

CloningbetweenMarkets

Found

?>5,000clustersofclones

?>44,000uniqueapps

CloningonEachMarket

DetermineImpact

?Naivequestion

Howmanytimeshasanappbeen

cloned?

?Betterquestion

Howmanypeopleuseaclonedapp

insteadoftheoriginal?

HowtoDetermineImpact

?Counttheusersrunningeachapp.

?Determinetheownershipofeachapp.

?Classifyoriginalvs.plagiarizedapps.

CountUsersRunningEachApp

Potentialvantagepoints

?Onthedevice

?Ontheappserver

?Onthenetwork

CountUsersRunningEachapp

Combinetrafficanalysiswithstaticanalysis

Onthenetwork

?Captureadtraffic

?ExtractclientIDs

Inthelab,foreachapp

?ExtractclientID

?Determinewhetheritisoriginalorclone

AdRob

TrafficAnalysis

?CollaboratedwithamajorUScellularprovider.

?Captured2.6billionpacketsin12days.

?Removedalluser-identifyinginformation.

LossofRevenueandUserBase

WebAdFraud

Programsthatautomatically“view”adsand“click”them

MobileAdFraud

Appsthatautomatically“view”adsand“click”them

MAdFraud

Goals

?Designsystemforautomaticallydetectingadtraffic

?Usesystemtodetectfraudandotherundesirableadbehavior

AdFraud

?Impressionfraud:requestadswheninthebackground.

?Clickfraud:clickonadswithoutuserinteraction.

MAdFraud

DynamicAnalysis

Foreachapp:

?Createanemulatorandinstalltheapp

?Runappintheforegroundfor1minute

?UseanIntenttomovetheappintothebackground

?Runappinthebackgroundfor1minute

?Captureallnetworktrafficthroughout

Neverinteractwithapptoensurealldetectedclicksarefraudulent

IdentifyImpressionsandClicks

Simpleapproach

?ReverseengineeradlibrariestofindadrequestandclickURLs

?UseURLstocountthenumberofimpressionsandclicks

Problems

?Timeintensiveforthemanyadlibraries(80+)

?Lackcontext

?Wastheadresold?

?Wastheclickproceededbyanimpression?

AutomaticallyIdentifyImpressionsandClicks

Buildrequesttrees

Identifyimpressionsusingmachinelearningbasedon

?Requesttreeproperties

?Queryparameters

?HTTPproperties

Identifyclicksbasedonrequesttreesandimpressions.

DatasetandResultsOverview

Dataset

150,000appscrawledfrom19markets

Finding:BackgroundImpressions

12,421appsmakeimpressionsinthebackground

Finding:ClickFraud

Prevention

Appcloning

?Market-scaleincrementalclonedetection

Adfraud

?Includeproofsofuserviewingorclickingprovidedbytrustedsoftware.

Conclusion

?Adsarecrucialforsustaining

溫馨提示

  • 1. 本站所有資源如無特殊說明，都需要本地電腦安裝OFFICE2007和PDF閱讀器。圖紙軟件為CAD,CAXA,PROE,UG,SolidWorks等.壓縮文件請下載最新的WinRAR軟件解壓。
  • 2. 本站的文檔不包含任何第三方提供的附件圖紙等，如果需要附件，請聯(lián)系上傳者。文件的所有權(quán)益歸上傳用戶所有。
  • 3. 本站RAR壓縮包中若帶圖紙，網(wǎng)頁內(nèi)容里面會有圖紙預覽，若沒有圖紙預覽就沒有圖紙。
  • 4. 未經(jīng)權(quán)益所有人同意不得將文件中的內(nèi)容挪作商業(yè)或盈利用途。
  • 5. 人人文庫網(wǎng)僅提供信息存儲空間，僅對用戶上傳內(nèi)容的表現(xiàn)方式做保護處理，對用戶上傳分享的文檔內(nèi)容本身不做任何修改或編輯，并不能對任何下載內(nèi)容負責。
  • 6. 下載文件中如有侵權(quán)或不適當內(nèi)容，請與我們聯(lián)系，我們立即糾正。
  • 7. 本站不保證下載資源的準確性、安全性和完整性, 同時也不承擔用戶因使用這些下載資源對自己和他人造成任何形式的傷害或損失。

評論

0/150

提交評論