Hacking Voice-Controllable Devices

Beschreibung

Voice-controllable devices allow hands-free interactions, offering a modern user experience and helping impaired users. However, the voice channel that enables this interaction is also one of their main weaknesses. Higher usability often comes with higher security and privacy risks. As Voice-Controllable Devices are no exception to this, a plethora of new attacks have been carried out against them in recent years. In this book, several attacks are analysed against the voice channel available in the literature; it then devises a bespoke kill chain to facilitate the classification of attack steps and future research. Additionally, the work analyses the design of the notorious Alexa vs Alexa attack, which turned Echo Dot devices against themselves in 2022. Finally, the present volume explores measures against all these attacks and raise important questions about their suitability for user needs. Topics and features: Discusses timely security and privacy challenges in IoT devices, with an emphasis on voice-controllable devices Provides a framework for assessing and studying attacks against the voice channel Addresses practical attacks successfully carried out against real devices, showing that an impactful attack need not be complex Explores advanced safeguards from a new perspective, questioning whether research is proceeding in the right direction This powerful volume—containing tips, tricks, and techniques used by ethical hackers to breach the voice channel—serves as the perfect guide for researchers conducting security and privacy research on IoT. It also provides food for thought for graduate students and enthusiasts of these subjects who do not shy away from the mathematics behind the world of machine learning. Sergio Esposito and Giampaolo Bella are affiliated with the University of Catania. Sergio Esposito is an Assistant Professor, and Giampaolo Bella is a Full Professor. Daniele Sgandurra is currently an independent researcher. Daniel O’Keeffe is affiliated with Royal Holloway, University of London, where he is a Senior Lecturer.

Voice-controllable devices allow hands-free interactions, offering a modern user experience and helping impaired users. However, the voice channel that enables this interaction is also one of their main weaknesses.

Higher usability often comes with higher security and privacy risks. As Voice-Controllable Devices are no exception to this, a plethora of new attacks have been carried out against them in recent years. In this book, several attacks are analysed against the voice channel available in the literature; it then devises a bespoke kill chain to facilitate the classification of attack steps and future research. Additionally, the work analyses the design of the notorious Alexa vs Alexa attack, which turned Echo Dot devices against themselves in 2022. Finally, the present volume explores measures against all these attacks and raise important questions about their suitability for user needs.

Topics and features:

• Discusses timely security and privacy challenges in IoT devices, with an emphasis on voice-controllable devices
• Provides a framework for assessing and studying attacks against the voice channel
• Addresses practical attacks successfully carried out against real devices, showing that an impactful attack need not be complex
• Explores advanced safeguards from a new perspective, questioning whether research is proceeding in the right direction

This powerful volume—containing tips, tricks, and techniques used by ethical hackers to breach the voice channel—serves as the perfect guide for researchers conducting security and privacy research on IoT. It also provides food for thought for graduate students and enthusiasts of these subjects who do not shy away from the mathematics behind the world of machine learning.

Autor*in

Sergio Esposito

Themen in »Hacking Voice-Controllable Devices«

Alexa Kill chain Threat model Voice command Wake word

Stimmen zu »Hacking Voice-Controllable Devices«

Details

Link teilen