A new paper from\u00a0Complutense University called \u201cA vulnerability in Google AdSense: Automatic extraction of links to ads\u201d highlights a weakness in the system which makes click fraud possible.<\/p>\n
The paper shows how an attacker can circumvent the security barriers of Google Adsense and create a system to automate ad clicking.<\/p>\n
\u201cOn the basis of the XSS (Cross Site Scripting) and Web Crawler techniques, it is possible to go through the barriers of the Google Adsense advertising system by obtaining the validated links of the ads published on a website,\u201d the paper states.<\/p>\n
\u201cSuch method involves obtaining the source code built for the Google Java applet for publishing and handling ads and for the final link retrieval.\u201d<\/p>\n
“Once the links of the ads have been obtained, you can use the user sessions visiting other websites to load such links, in the background, by a simple re-direction, through a hidden iframe, so that the IP addresses clicking are different in each case.”<\/p>\n
The full paper and code used in the research is available here: A vulnerability in Google AdSense: Automatic extraction of links to ads<\/a><\/strong><\/p>\n Google Project Aura to replace Google Glass<\/a><\/strong><\/p>\nMore on Google<\/h3>\n