Abstract: A method, a system, and an article are provided for detecting and managing anomalies associated with content presentations. An example computer-implemented method includes: obtaining a stream of data including a record of software installations on a plurality of client devices; processing the stream of data using a real-time anomaly detector to detect a first anomaly indicating that a client device was previously associated with fraudulent software installation activity; aggregating the stream of data to generate a batch record of software installations for each publisher from a plurality of content publishers; processing each batch record of software installations using a batch anomaly detector to detect a second anomaly indicating that at least one of the publishers is associated with fraudulent software installation activity; and facilitating an adjustment of content presentations on the client devices, based on at least one of the detected first anomaly and the detected second anomaly.

Abstract: Implementations of the present disclosure are directed to a method, a system, and an article for providing software on client devices. An example computer-implemented method can include: providing, for each of a plurality of online games, access to (i) a client application configured to provide a full version of the online game and (ii) a server application configured to provide a trial version of the online game; receiving a request from a user client device to play the trial version of a selected online game and, in response thereto: running the trial version of the selected online game on a server computer; enabling a user to interact with the trial version on the user client device; receiving a request from the user to download the full version of the selected online game; and providing the client application for the selected online game to the user client device.

Abstract: A method, a system, and an article are provided for detecting and managing anomalies associated with content presentations. An example computer-implemented method includes: obtaining a stream of data including a record of software installations on a plurality of client devices; processing the stream of data using a real-time anomaly detector to detect a first anomaly indicating that a client device was previously associated with fraudulent software installation activity; aggregating the stream of data to generate a batch record of software installations for each publisher from a plurality of content publishers; processing each batch record of software installations using a batch anomaly detector to detect a second anomaly indicating that at least one of the publishers is associated with fraudulent software installation activity; and facilitating an adjustment of content presentations on the client devices, based on at least one of the detected first anomaly and the detected second anomaly.

Abstract: A computer-implemented method and corresponding system for determining attribution for an action taken by a user exposed to published content on a plurality of online platforms, the method including receiving an engagement call transmitted by the user's mobile communication device for each engagement with the published content by the user; attributing, based on the engagement calls, the user action to a corresponding content publisher on whose online platform the user engaged with the published content; and facilitating an adjustment of future content presentations based on the attribution.