IAB Tech Lab Announces ads.cert 2.0 Authentication Protocols to Combat Ad Fraud Across the Digital Advertising Ecosystem

NEW YORK, Sept. 30, 2021 /PRNewswire/ -- IAB Tech Lab, the digital advertising technical standards-setting body, announced today the ads.cert 2.0, a standard introduced to enhance security in the digital advertising ecosystem by using industry-standard cryptographic security protocols. In particular, the protocols secure buying and selling of programmatic Connected TV (CTV) ad inventory, which is where a number of recent ad fraud attempts have focused on. The updated ads.cert 2.0 will be open for public comment for 30 days, until October 30th.

Developed by the IAB Tech Lab's Cryptographic Security Foundations Working Group, ads.cert 2.0 establishes a common framework and guidelines for safe and transparent transactions across ad buying and selling through a number of security protocols.

• The "ads.cert Call Signs" protocol defines a mechanism that enables businesses to be able to formally identify other businesses involved in any one transaction. It does this by using DNS records to publish public keys and metadata about the businesses involved.
• The "ads.cert Authenticated Connections" protocol adds origin authentication and tamper resistance to any request made server-to-server, such as bid request, creative fetches, impression pings, and billing notifications.
• The "ads.cert Authenticated Delivery" protocol will authenticate the data in a bid request and enables buyers to identify if any of the bid parameters had been tampered with or changed from the original source.
• The "ads.cert Authenticated Devices" protocol will support attestation from the manufacturer about the legitimacy of the device the ad is being served on.

The current release includes specifications for "Call Signs" and "Authenticated Connections" protocols. For CTV specifically, ads.cert will address Server-Side Ad Insertion (SSAI) related ad fraud. Applying the Authenticated Connections protocols to SSAI billing notifications helps ensure that the sources of invoices for CTV inventory can be confirmed.

"ads.cert is intended to provide a consistent security framework for all use cases within digital advertising," said Amit Shetty, Vice President, Programmatic Products & Partnership, IAB Tech Lab. "Ad dollars to CTV continue to accelerate and where the money goes, the fraudsters follow, which is why we have focused on CTV in this release. We recommend that all SSAI providers immediately implement "Authenticated Connections' and all publishers and buyers require authenticated connections for buying CTV media."

"As an industry, we must move quickly in adopting tools that help safeguard all inventory and advertising investments," said Rob Hazan, Senior Director of Product, Index Exchange and Co-Chair of the IAB Tech Lab Security Foundations Working Group. "Standards like the ads.cert 2.0 provide a common framework and open source tools to combat the increasingly frequent ad fraud attempts we're seeing in CTV, and are a critical component in securing the programmatic supply chain."

An open source implementation has also been released on IAB Tech Lab's github repository to ease adoption of the protocol.To review the proposed standard and provide feedback, please go to: https://iabtechlab.com/standards/ads-cert/

These specifications and best practices to address ad fraud in the digital advertising ecosystem will be discussed further at the IAB Tech Lab Summit: Renaissance happening October 13 - 14. For more information, visit: https://www.iabtechlab.com/summit. 

About IAB Technology Laboratory

Established in 2014, the IAB Technology Laboratory (Tech Lab) is a non-profit consortium that engages a member community globally to develop foundational technology and standards that enable growth and trust in the digital media ecosystem. Comprised of digital publishers, ad technology firms, agencies, marketers, and other member companies, IAB Tech Lab focuses on solutions for brand safety and ad fraud; identity, data, and consumer privacy; ad experiences and measurement; and programmatic effectiveness. Its work includes the OpenRTB real-time bidding protocol, ads.txt anti-fraud specification, Open Measurement SDK for viewability and verification, VAST video specification, and Project Rearc initiative for privacy-centric addressability. Board members/companies are listed at https://iabtechlab.com/about-the-iab-tech-lab/tech-lab-leadership/. For more information, please visit https://iabtechlab.com.

SOURCE IAB Tech Lab