Emerging Threats in IoT Voice Services

Deepak Kumar, Riccardo Paccagnella, Paul Murley, Eric Hennenfent, Joshua Mason, Adam Bates, and Michael Bailey.
IEEE Security and Privacy Magazine.
July 9, 2019.
Available Media


In this study, we conduct an empirical analysis of interpretation errors made by Amazon Alexa, the speech recognition engine that powers the Amazon Echo family of devices. We show how misinterpretations made by Alexa can be used to build a new attack, called skill squatting, and discuss its security implications.