Using AI to Hack IA: A New Stealthy Spyware Against Voice Assistance Functions in Smart Phones

05/16/2018
by   Rongjunchen Zhang, et al.
0

Intelligent Personal Assistant (IA), also known as Voice Assistant (VA), has become increasingly popular as a human-computer interaction mechanism. Most smartphones have built-in voice assistants that are granted high privilege, which is able to access system resources and private information. Thus, once the voice assistants are exploited by attackers, they become the stepping stones for the attackers to hack into the smartphones. Prior work shows that the voice assistant can be activated by inter-component communication mechanism, through an official Android API. However, this attack method is only effective on Google Assistant, which is the official voice assistant developed by Google. Voice assistants in other operating systems, even custom Android systems, cannot be activated by this mechanism. Prior work also shows that the attacking voice commands can be inaudible, but it requires additional instruments to launch the attack, making it unrealistic for real-world attack. We propose an attacking framework, which records the activation voice of the user, and launch the attack by playing the activation voice and attack commands via the built-in speaker. An intelligent stealthy module is designed to decide on the suitable occasion to launch the attack, preventing the attack being noticed by the user. We demonstrate proof-of-concept attacks on Google Assistant, showing the feasibility and stealthiness of the proposed attack scheme. We suggest to revise the activation logic of voice assistant to be resilient to the speaker based attack.

READ FULL TEXT

page 4

page 6

page 8

page 9

research
02/05/2022

GhostTalk: Interactive Attack on Smartphone Voice System Through Power Line

Inaudible voice command injection is one of the most threatening attacks...
research
05/20/2020

Fingerprinting Encrypted Voice Traffic on Smart Speakers with Deep Learning

This paper investigates the privacy leakage of smart speakers under an e...
research
03/07/2023

EavesDroid: Eavesdropping User Behaviors via OS Side-Channels on Smartphones

As the Internet of Things (IoT) continues to evolve, smartphones have be...
research
03/21/2023

Hey Dona! Can you help me with student course registration?

In this paper, we present a demo of an intelligent personal agent called...
research
12/20/2022

VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion

Keyword spotting (KWS) based on deep neural networks (DNNs) has achieved...
research
10/01/2019

IDEAIS: Smart Voice Assistants to Improve Interaction with SDIs

A critical goal, is that organizations and citizens can easily access th...
research
06/17/2022

The SPACE THEA Project

In some situations, no professional human contact can be available. Acco...

Please sign up or login with your details

Forgot password? Click here to reset