Using Amazon Alexa APIs as a Source of Digital Evidence

06/15/2020
by   Clemens Krueger, et al.
0

With the release of Amazon Alexa and the first Amazon Echo device, the company revolutionised the smart home. It allowed their users to communicate with, and control, their smart home ecosystem purely using voice commands. However, this also means that Amazon processes and stores a large amount of personal data about their users, as these devices are always present and always listening in peoples' private homes. That makes this data a valuable source of evidence for investigators performing digital forensics. The Alexa Voice Service uses a series of APIs for communication between clients and the Amazon cloud. These APIs return a wide range of data related to the functionality of the device used. The first goal of this research was to clarify exactly what kind of information about the user is stored and accessible through these APIs. To do this, a combination of literature review and exploratory analysis was used to establish a list of all relevant APIs. Then, possible artefacts and conclusions to be drawn from their responses were identified and presented. Lastly, the perspective of the users was taken, and options for improving their privacy were reviewed. Specifically, the history of interaction between the user and Alexa is available through multiple APIs, and there are several options to delete it. It was determined that these options have different behaviours and that most of them do not remove all data related to user interaction.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
10/24/2022

Taxonomic Classification of IoT Smart Home Voice Control

Voice control in the smart home is commonplace, enabling the convenient ...
research
08/31/2022

In Alexa, We Trust. Or Do We? : An analysis of People's Perception of Privacy Policies

Smart home devices have found their way through people's homes as well a...
research
02/23/2021

A Survey on Amazon Alexa Attack Surfaces

Since being launched in 2014, Alexa, Amazon's versatile cloud-based voic...
research
02/28/2018

Intelligent Virtual Assistant knows Your Life

In the IoT world, intelligent virtual assistant (IVA) is a popular servi...
research
05/27/2021

An Analysis of Amazon Echo's Network Behavior

With over 20 million units sold since 2015, Amazon Echo, the Alexa-enabl...
research
03/09/2023

Towards Usable Parental Control for Voice Assistants

Voice Personal Assistants (VPA) have become a common household appliance...
research
02/17/2022

Alexa versus Alexa: Controlling Smart Speakers by Self-Issuing Voice Commands

We present Alexa versus Alexa (AvA), a novel attack that leverages audio...

Please sign up or login with your details

Forgot password? Click here to reset