Near-Ultrasound Inaudible Trojan (Nuit): Exploiting Your Speaker to Attack Your Microphone
Near-Ultrasound Inaudible Trojan (Nuit): Exploiting Your Speaker to Attack Your Microphone
复制标题
DOI：
--
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
Qifeng Xia;Qian Chen;Shouhuai Xu
中科院分区：
文献类型：
--
作者：
Qifeng Xia;Qian Chen;Shouhuai Xu
语音控制系统(VCS)为向智能设备发出语音命令提供了一个方便的界面。然而，VCS的安全性还没有得到充分的理解和解决，因为存在两类攻击：(I)不可听攻击，当攻击者和受害者彼此接近时可以发动攻击；(Ii)声音攻击，可以通过在音频中嵌入攻击信号来远程发动。在本文中，我们介绍了一类新的攻击，称为近超声不可闻木马(NUIT)。Nuit攻击实现了上述两类攻击中的最好：它们是听不见的，可以远程发动。此外，单元攻击可以实现端到端的不可察觉，这一点很重要，但在文献中尚未得到应有的重视。NUIT攻击的另一个特点是利用受害者扬声器攻击受害者麦克风及其关联的VCS，这意味着攻击者不需要使用任何特殊扬声器。我们论证了单元攻击的可行性，并提出了一种有效的防御方案。
Voice Control Systems (VCSs) offer a convenient interface for issuing voice commands to smart devices. However, VCS security has yet to be adequately understood and addressed as evidenced by the presence of two classes of attacks: (i) inaudi-ble attacks, which can be waged when the attacker and the victim are in proximity to each other; and (ii) audible attacks, which can be waged remotely by embedding attack signals into audios. In this paper, we introduce a new class of attacks, dubbed near-ultrasound inaudible trojan ( NUIT ). NUIT attacks achieve the best of the two classes of attacks mentioned above: they are inaudible and can be waged remotely . Moreover, NUIT attacks can achieve end-to-end unnoticeabil-ity , which is important but has not been paid due attention in the literature. Another feature of NUIT attacks is that they exploit victim speakers to attack victim microphones and their associated VCSs, meaning the attacker does not need to use any special speaker. We demonstrate the feasibility of NUIT attacks and propose an effective defense against them.