Vulnerabilities / Threats
6/14/2012
02:31 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Google, Facebook, Twitter, AOL Fight Badware

Tech giants, Internet Advertising Bureau, and StopBadware form the Ads Integrity Alliance to battle malicious advertising.

Google and Facebook may be cutthroat competitors but they share a common enemy: bad advertising. That's "bad" in the sense of harmful rather than ineffective or cringe-inducing. If enough Internet users start seeing online ads as a source of malware or as untrustworthy, they could take steps to block ads. That would be ruinous for revenue.

So it is that Google and Facebook, along with AOL, Twitter, and the Internet Advertising Bureau (IAB) on Thursday joined with StopBadware to announce the formation of the Ads Integrity Alliance, an industry partnership to fight bad advertising.

Bad advertising includes malvertising--malware delivered via ads--and ads that deceive or violate policies.

The Ads Integrity Alliance aims to serve three primary functions: developing and sharing industry best practices; coordinating information sharing about those attempting to abuse online ad systems; and sharing trend data with regulators and law enforcement agencies.

[ ICANN's plan to approve new domain names spurs competition for desirable suffixes. Read New Domain Names Tempt Amazon, Google, Microsoft. ]

If you listen, you may be able to hear echoes of past industry ad security initiatives. Google was among the Internet companies that backed the formation of StopBadware in 2006, along with Sun Microsystems and Lenovo. Back then, there was more concern about adware: downloadable applications--the term had not yet been shorted to "app"--that presented unwanted ads and sometimes stole information.

The group was also concerned about spyware, software that collects personal information without the user's consent. That was before companies figured out that they could collect personal information with user consent by burying information collection practices in lengthy "privacy policies" and making acceptance of those policies a requirement for service usage.

In 2009, Google launched a website called Anti-Malvertising.com, a custom search engine and website to help its ad network partners identify potential providers of malicious advertisements. It also maintains a Google Groups mailing list called the DoubleClick Anti-Malvertising Group that posts alerts about websites hosting malware and ad networks distributing malicious ads.

In 2008, Google security engineer Niels Provos said in a blog post that about 2% of malicious websites were distributing malware through advertising, based on an analysis of about 2,000 known advertising networks. The company declined to update that particular metric but did post vaguely related figures last month.

Google says it disabled over 134 million ads and the accounts of over 824,000 advertisers for policy violations in 2011--so only a small subset of these ads carried malware. This is up sharply from 2010, when Google disabled 54.7 million ads and 248,000 advertiser accounts.

Nonetheless, Google insists its efforts are working. David W. Baker, director of engineering for Google's advertising group, said in a blog post last month that Google reduced the percentage of bad ads shown in 2011 to half what it was in 2010.

StopBadware did not provide specific figures about the prevalence of bad ads, but a spokesperson for the group said, "We speak daily to owners and administrators of compromised websites, and in our experience bad ads are almost exclusively the cause of site compromise on well-regarded, high-traffic websites."

The Enterprise 2.0 Conference brings together industry thought leaders to explore the latest innovations in enterprise social software, analytics, and big data tools and technologies. Learn how your business can harness these tools to improve internal business processes and create operational efficiencies. It happens in Boston, June 18-21. Register today!

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Bprince
50%
50%
Bprince,
User Rank: Ninja
6/16/2012 | 1:55:06 PM
re: Google, Facebook, Twitter, AOL Fight Badware
Twitter just bought Dasient I believe in January along the same lines. @ readers - Have malicious advertisements changed your surfing habits on the Web in any way?
Brian Prince, InformationWeek/Dark Reading Comment Moderator
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2010-5110
Published: 2014-08-29
DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file.

CVE-2012-1503
Published: 2014-08-29
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section.

CVE-2013-5467
Published: 2014-08-29
Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring (ITM)...

CVE-2014-0600
Published: 2014-08-29
FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.

CVE-2014-0888
Published: 2014-08-29
IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
This episode of Dark Reading Radio looks at infosec security from the big enterprise POV with interviews featuring Ron Plesco, Cyber Investigations, Intelligence & Analytics at KPMG; and Chris Inglis & Chris Bell of Securonix.