DETECTING FRAUD IN CONNECTION WITH ADVERSTISEMENTS

摘要

Embodiments are disclosed for identifying a suspect application based on multiple operating factors from use of multiple applications. The embodiments can generate a representative distribution of a selected factor based on collected information corresponding to multiple operating factors from use of multiple applications. The embodiments can compare a representative distribution of a target factor with the representative distribution of the selected factor and identify a suspect application when these distributions are different.

主权项

1. A method, performed by a computing device having a processor, comprising:
receiving a trusted distribution of an operating factor generated from use of two or more applications in multiple mobile devices; receiving a target distribution of a target operating factor generated from use of a target application; comparing the target distribution and the trusted distribution; and identifying the target application as a suspect application, in an event that the target distribution is different from the trusted distribution.