~/talk

Identifying Advertising Fraud and Abuse

Talkat droidcon APAC 2020 · 2020-12-14..12-15· [security]
links:none on file
slides:none on file

Identifies three high‑impact fraud patterns and concrete detection signals: INSTALL_REFERRER broadcast abuse causes install attribution fraud — replace with the Play Store install referral HTTP API; programmatic clicking uses APIs like dispatchTouchEvent with fabricated X/Y coordinates and methods named “autoclick” or “delayClick”; disruptive ads use boot completed receivers + AlarmManager/PendingIntent, hide from launcher and dynamically swap inventory. Testing notes: analyze manifests for install referrers, run real-device installs (not emulators or common VPN/cloud ASNs), let apps sit to observe cloaked behavior.

AI-written summary · about

  1. 0:00Introduction to ad fraud
  2. 1:29Why ad fraud matters
  3. 2:53Install attribution fraud
  4. 7:07Programmatic clicking fraud
  5. 9:55Disruptive ad behavior
  6. 13:32Spoofing and arbitrage schemes
  7. 17:22Cloaking techniques in adware
  8. 21:37Testing SDKs for fraud
  9. 25:13Avoiding fraudulent SDKs
  10. 25:53Q&A and closing
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.