CAREER: Secure Voice-Controlled Platforms

语音控制技术利用自然语言处理（NLP）技术通过语音用户界面（VUI）实现免提交互，广泛部署在众多物联网平台中，如Amazon Alexa、Google Home和汽车语音助手。除了内置的功能外，语音控制设备还通过亚马逊和谷歌等提供商培育的生态系统进行了增强。在这样的生态系统中，第三方开发人员可以构建新的功能，为最终用户提供额外的服务，例如订购食物，管理银行账户和锁门。这些系统已经部署到世界各地的家庭，并被数千万用户使用。然而，它们可能带来新的安全和隐私风险，其影响迄今尚未得到充分理解。这项工作的重点是解决语音控制平台中的安全和隐私问题。该项目定义了我们如何在使用语音接口的同时保护用户，并在保护物联网基础设施和增强国家安全方面取得了关键进展。结合综合教育和推广工作，这项工作为设计具有强大安全性和隐私特性的物联网平台提供了技术基础。保护语音用户界面从根本上说是一项挑战，因为缺乏有效的手段来验证和授权参与开放和嘈杂信道的各方。该项目的重点是保护用户，帮助他们避免通过嘈杂，开放和低带宽的语音通道进行意外的敏感行为。这项工作围绕三个主要方面展开：（1）基于聊天机器人的有效且高效的测试框架的设计，该框架结合语义理解和安全领域知识来生成输入，并且理解输出，以用于在安装时间期间确定语音应用中的意外敏感行为，（2）基于上下文的完整性检查和检测的设计，以用于在运行时的意外语音命令，以及（3）设计可用的界面，以便与用户就前两个重点中确定的风险进行沟通。该奖项反映了NSF的法定使命，并通过使用基金会的智力价值和更广泛的影响力审查标准进行评估，被认为值得支持。

Voice control technologies, which utilize natural language processing (NLP) techniques to enable handsfree interactions through Voice User Interface (VUI), are widely deployed in a plethora of IoT platforms, such as Amazon Alexa, Google Home, and automotive voice assistants. In addition to the built-in functionalities, voice-controlled devices are enhanced by an ecosystem fostered by their providers, such as Amazon and Google. In such an ecosystem, third-party developers can build new functions to offer additional services to the end-users for example, order food, manage bank accounts, and lock doors. These systems have already been deployed to households around the world and utilized by tens of millions of users. However, they could bring in new security and privacy risks, whose implications are not adequately understood so far. This work focuses on addressing the security and privacy issues in voice-controlled platforms. The project defines how we secure users while using voice interfaces and make key progress towards securing the IoT infrastructure and enhancing national security. Combined with integrated education and outreach efforts, this work provides a technical foundation for designing IoT platforms with strong security and privacy properties. Protecting Voice User Interfaces is fundamentally challenging, owing to the lack of effective means to authenticate and authorize the parties involved in the open and noisy channel. The project focuses on protecting users by helping them avoid unexpected sensitive behaviors through the noisy, open, and low-bandwidth voice channel. The work is organized around three main thrusts: (1) the design of a chatbot-based effective and efficient testing framework that combines semantic understanding and security domain knowledge to generate inputs, and understands outputs for determining unexpected sensitive behaviors in the voice apps during installation time, (2) the design of context-based integrity check and detection for unexpected voice command at runtime, and (3) the design of usable interfaces to communicate with users about the risks identified in the first two thrusts. These explorations culminate in the design options for a security module as part of a voice-controlled platform, and broader security and privacy recommendations for IoT platforms.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.