Measuring and fingerprinting click-spam in ad networks
SLEUTH: Single-pubLisher attack dEtection Using correlaTion Hunting