Name
Abstract | ||
|---|---|---|
With the widespread adoption of Internet advertising, fraud has become a systemic problem.While the existence of clickbots--malware specialized for conducting click-fraud--has been known for a number of years, the actual functioning of these programs has seen little study. We examine the operation and underlying economic models of two families of modern clickbots, "Fiesta" and "7cy." By operating the malware specimens in a controlled environment we reverse-engineered the protocols used to direct the clickbots in their activities.We then devised a milker program that mimics clickbots requesting instructions, enabling us to extract over 360,000 click-fraud directives from the clickbots' control servers. We report on the functioning of the clickbots, the steps they employ to evade detection, variations in how their masters operate them depending on their geographic locality, and the differing economic models underlying their activity. |
Year | DOI | Venue |
|---|---|---|
2011 | 10.1007/978-3-642-22424-9_10 | DIMVA |
Keywords | Field | DocType |
control server,actual functioning,economic model,click-fraud directive,internet advertising,geographic locality,controlled environment,milker program,malware specimen,modern clickbots | Geographic Locality,Economic model,Computer security,Computer science,Server,Online advertising,Malware | Conference |
Volume | ISSN | Citations |
6739 | 0302-9743 | 18 |
PageRank | References | Authors |
2.50 | 16 | 5 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Brad Miller | 1 | 299 | 65.09 |
| Paul Pearce | 2 | 164 | 7.95 |
| Chris Grier | 3 | 1533 | 75.00 |
| Christian Kreibich | 4 | 1738 | 145.49 |
| Vern Paxson | 5 | 14031 | 2130.20 |