权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

SaTC: CORE: Small: Practical and Robust Hidden Voice Commands

SaTC：核心：小：实用且强大的隐藏语音命令

基本信息

批准号：
1718498
负责人：
Micah Sherr
金额：
$ 50.63万
依托单位：
Georgetown University
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2017
资助国家：
美国
起止时间：
2017-09-01 至 2021-08-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1718498&HistoricalAwards=false
关键词：
SaTC CORE Small Practical Robust

项目摘要

Systems like Amazon's Alexa, Google Home and Apple's Siri allow users to issue voice commands and pose questions to personal digital assistants. Since these systems often have access to sensitive data and can perform tasks with serious impact (e.g., spend money to make a purchase), attacks against them could have significant consequences. Unfortunately, recent research has shown that attacks against such voice-based interfaces are feasible. This project is exploring methods of securing the voice interfaces to smartphones and other devices to ensure that commands are only accepted from the devices' owners. The researchers recently introduced the notion of hidden voice commands: audio that is constructed to be interpreted as voice commands by a computer speech recognition system, but is incomprehensible to human listeners. In theory, attackers may use hidden voice commands to surreptitiously control victims' smartphones and other electronic devices. Is this a realistic threat in practice? This project is studying both the practicality of this threat and approaches to protection. First, the researchers are investigating whether an attacker could construct hidden voice commands efficiently and covertly and make the commands operate under realistic conditions to circumvent previously proposed defenses. Second, they are developing scalable detection techniques and defenses that reliably and efficiently prevent such attacks.

亚马逊的Alexa、谷歌Home和苹果的Siri等系统允许用户向个人数字助理发出语音命令和提出问题。由于这些系统通常可以访问敏感数据并且可以执行具有严重影响的任务（例如，花钱购物），对他们的攻击可能会产生重大后果。不幸的是，最近的研究表明，对这种基于语音的接口的攻击是可行的。该项目正在探索保护智能手机和其他设备的语音接口的方法，以确保仅接受设备所有者的命令。研究人员最近引入了隐藏语音命令的概念：被计算机语音识别系统解释为语音命令的音频，但人类听众无法理解。从理论上讲，攻击者可能会使用隐藏的语音命令来秘密控制受害者的智能手机和其他电子设备。这在实践中是一个现实的威胁吗？该项目正在研究这一威胁的实际性和保护办法。首先，研究人员正在调查攻击者是否可以有效地、隐蔽地构建隐藏的语音命令，并使这些命令在现实条件下运行，以规避先前提出的防御措施。其次，他们正在开发可扩展的检测技术和防御措施，以可靠有效地防止此类攻击。

项目成果

期刊论文数量（7）

专著数量（0）

科研奖励数量（0）

会议论文数量（0）

专利数量（0）

Ephemeral Exit Bridges for Tor

Tor 的临时出口桥

DOI：
发表时间：
2020
期刊：
50th IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2020
影响因子：
0
作者：
Zhang, Zhao;Vaidya, Tavish;Subramanian, Kartik;Zhou, Wenchao;Sherr, Micah
通讯作者：
Sherr, Micah

Residue-Free Computing

无残留计算

DOI：
10.2478/popets-2021-0076
发表时间：
2021
期刊：
Proceedings on Privacy Enhancing Technologies
影响因子：
0
作者：
Arkema, Logan;Sherr, Micah
通讯作者：
Sherr, Micah

Whisper: a unilateral defense against VoIP traffic re-identification attacks

DOI：
10.1145/3359789.3359807
发表时间：
2019-12
期刊：
Proceedings of the 35th Annual Computer Security Applications Conference
影响因子：
0
作者：
Tavish Vaidya;T. Walsh;M. Sherr
通讯作者：
Tavish Vaidya;T. Walsh;M. Sherr

Examining the Examiners: Students' Privacy and Security Perceptions of Online Proctoring Services

检查考官：学生对在线监考服务的隐私和安全看法

DOI：
发表时间：
2021
期刊：
Proceedings of the Seventeenth Symposium on Usable Privacy and Security
影响因子：
0
作者：
Balash, David G.;Kim, Dongkun;Shaibekova, Darika;Fainchtein, Rahel A.;Sherr, Micah;Aviv, Adam J.
通讯作者：
Aviv, Adam J.

You Talk Too Much: Limiting Privacy Exposure via Voice Input

你说得太多：通过语音输入限制隐私暴露