the Security of Pay-Per-Click...

[littleman]

This paper has been out for a while, but it is a good read if you are into this type of thing.
[www8.org ]
It doesn't address browser simulating bots, which is curious.