{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T20:27:37Z","timestamp":1780604857823,"version":"3.54.1"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031541285","type":"print"},{"value":"9783031541292","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-54129-2_11","type":"book-chapter","created":{"date-parts":[[2024,3,11]],"date-time":"2024-03-11T22:03:15Z","timestamp":1710194595000},"page":"176-197","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["The VOCODES Kill Chain for\u00a0Voice Controllable Devices"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9904-9821","authenticated-orcid":false,"given":"Sergio","family":"Esposito","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5238-8068","authenticated-orcid":false,"given":"Daniele","family":"Sgandurra","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7615-8643","authenticated-orcid":false,"given":"Giampaolo","family":"Bella","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,3,12]]},"reference":[{"key":"11_CR1","unstructured":"Adams, E.: Avoiding Wake-Word Self-Triggering (2018). https:\/\/patents.google.com\/patent\/US20190311719A1\/en. Accessed 04 Dec 2020"},{"key":"11_CR2","doi-asserted-by":"publisher","first-page":"17841","DOI":"10.1109\/ACCESS.2017.2747626","volume":"5","author":"E Alepis","year":"2017","unstructured":"Alepis, E., Patsakis, C.: Monkey says, monkey does: security and privacy on voice assistants. IEEE Access 5, 17841\u201317851 (2017). https:\/\/doi.org\/10.1109\/ACCESS.2017.2747626","journal-title":"IEEE Access"},{"key":"11_CR3","unstructured":"Amazon.com Inc.: Amazon Echo & Alexa Devices (2022). https:\/\/www.amazon.com\/smart-home-devices\/b?node=9818047011. Accessed 11 Aug 2022"},{"key":"11_CR4","doi-asserted-by":"publisher","unstructured":"Bella, G., Biondi, P., Bognanni, S., Esposito, S.: Petiot: penetration testing the internet of things. Internet of Things 22, 100707 (2023). https:\/\/doi.org\/10.1016\/j.iot.2023.100707, https:\/\/www.sciencedirect.com\/science\/article\/pii\/S2542660523000306","DOI":"10.1016\/j.iot.2023.100707"},{"key":"11_CR5","unstructured":"BMW (UK) Limited: BMW Online Genius - What is Intelligent Personal Assistant? (2021). https:\/\/discover.bmw.co.uk\/help\/technology\/what-is-ipa. Accessed 05 Dec 2022"},{"key":"11_CR6","unstructured":"Chen, Y., et al.: Devil\u2019s whisper: a general approach for physical adversarial attacks against commercial black-box speech recognition devices. In: 29th USENIX Security Symposium (USENIX Security 20), pp. 2667\u20132684. USENIX Association (2020). https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/chen-yuxuan"},{"key":"11_CR7","doi-asserted-by":"crossref","unstructured":"Dasgupta, P.B.: Detection and analysis of human emotions through voice and speech pattern processing. arXiv preprint arXiv:1710.10198 (2017)","DOI":"10.14445\/22312803\/IJCTT-V52P101"},{"key":"11_CR8","doi-asserted-by":"publisher","unstructured":"Diao, W., Liu, X., Zhou, Z., Zhang, K.: Your voice assistant is mine: how to abuse speakers to steal information and control your phone. In: Wang, C., Huang, D., Singh, K., Liang, Z. (eds.) Proceedings of the 4th ACM Workshop on Security and Privacy in Smartphones & Mobile Devices, SPSM@CCS 2014, Scottsdale, AZ, USA, November 03\u201307, 2014, pp. 63\u201374. ACM (2014). https:\/\/doi.org\/10.1145\/2666620.2666623","DOI":"10.1145\/2666620.2666623"},{"key":"11_CR9","doi-asserted-by":"publisher","unstructured":"Edu, J.S., Such, J.M., Suarez-Tangil, G.: Smart home personal assistants: a security and privacy review. ACM Comput. Surv. 53(6) (2020). https:\/\/doi.org\/10.1145\/3412383","DOI":"10.1145\/3412383"},{"key":"11_CR10","doi-asserted-by":"crossref","unstructured":"Esposito, S., Sgandurra, D., Bella, G.: Alexa versus Alexa: controlling smart speakers by self-issuing voice commands. In: Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security, pp. 1064\u20131078 (2022)","DOI":"10.1145\/3488932.3497766"},{"key":"11_CR11","doi-asserted-by":"publisher","unstructured":"Esposito, S., Sgandurra, D., Bella, G.: Protecting voice-controllable devices against self-issued voice commands. In: 2023 IEEE 8th European Symposium on Security and Privacy (EuroS &P), pp. 160\u2013174 (2023). https:\/\/doi.org\/10.1109\/EuroSP57164.2023.00019","DOI":"10.1109\/EuroSP57164.2023.00019"},{"key":"11_CR12","unstructured":"Google LLC: Compare the Google Nest family (2022). https:\/\/store.google.com\/gb\/magazine\/compare_speakers. Accessed 11 Aug 2022"},{"key":"11_CR13","unstructured":"Grenard, L.: Leon - Your Open-Source Personal Assistant (2019). https:\/\/getleon.ai\/. Accessed 05 Dec 2022"},{"issue":"1","key":"11_CR14","first-page":"80","volume":"1","author":"EM Hutchins","year":"2011","unstructured":"Hutchins, E.M., Cloppert, M.J., Amin, R.M., et al.: Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains. Leading Issues Inf. Warfare Secur. Res. 1(1), 80 (2011)","journal-title":"Leading Issues Inf. Warfare Secur. Res."},{"key":"11_CR15","doi-asserted-by":"publisher","unstructured":"Jang, Y., Song, C., Chung, S.P., Wang, T., Lee, W.: A11y attacks: exploiting accessibility in operating systems. In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security. CCS 2014, New York, NY, USA, pp. 103\u2013115. Association for Computing Machinery (2014). https:\/\/doi.org\/10.1145\/2660267.2660295","DOI":"10.1145\/2660267.2660295"},{"issue":"3","key":"11_CR16","doi-asserted-by":"publisher","first-page":"3153","DOI":"10.1007\/s11042-018-5897-5","volume":"78","author":"H Kim","year":"2019","unstructured":"Kim, H., Kwon, H., Kim, K.K.: Modified cyber kill chain model for multimedia service environments. Multimedia Tools Appl. 78(3), 3153\u20133170 (2019)","journal-title":"Multimedia Tools Appl."},{"key":"11_CR17","unstructured":"Kumar, D., et al.: Skill squatting attacks on amazon Alexa. In: 27th USENIX Security Symposium (USENIX Security 2018), Baltimore, MD, pp. 33\u201347. USENIX Association (2018), https:\/\/www.usenix.org\/conference\/usenixsecurity18\/presentation\/kumar"},{"key":"11_CR18","unstructured":"Lang, J.P.: Wake-Word Detection Suppression (2017). https:\/\/patents.google.com\/patent\/US10475449B2\/en. Accessed 04 Dec 2020"},{"key":"11_CR19","unstructured":"Li, J., Qu, S., Li, X., Szurley, J., Kolter, J.Z., Metze, F.: Adversarial music: real world audio adversary against wake-word detection system. In: Wallach, H.M., Larochelle, H., Beygelzimer, A., d\u2019Alch\u00e9-Buc, F., Fox, E.B., Garnett, R. (eds.) Advances in Neural Information Processing Systems 32: Annual Conference on Neural Information Processing Systems 2019, NeurIPS 2019(December), pp. 8\u201314, 2019. Vancouver, BC, Canada, pp. 11908\u201311918 (2019). https:\/\/proceedings.neurips.cc\/paper\/2019\/hash\/ebbdfea212e3a756a1fded7b35578525-Abstract.html"},{"key":"11_CR20","unstructured":"Malone, S.: The Expanded Cyber Kill Chain Model (2016). https:\/\/www.seantmalone.com\/docs\/us-16-Malone-Using-an-Expanded-Cyber-Kill-Chain-Model-to-Increase-Attack-Resiliency.pdf"},{"key":"11_CR21","unstructured":"Microsoft Corporation: Text to Speech - Realistic AI Voice Generator | Microsoft Azure (2022). https:\/\/azure.microsoft.com\/en-us\/products\/cognitive-services\/text-to-speech\/. Accessed 06 Dec 2022"},{"key":"11_CR22","doi-asserted-by":"publisher","unstructured":"Mitev, R., Miettinen, M., Sadeghi, A.R.: Alexa lied to me: skill-based man-in-the-middle attacks on virtual assistants. In: Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security. Asia CCS 2019, New York, NY, USA, pp. 465\u2013478. Association for Computing Machinery (2019). https:\/\/doi.org\/10.1145\/3321705.3329842","DOI":"10.1145\/3321705.3329842"},{"key":"11_CR23","unstructured":"Mycroft AI Inc: Mark II - Mycroft (2021). https:\/\/mycroft.ai\/product\/mark-ii\/. Accessed 05 Dec 2022"},{"key":"11_CR24","unstructured":"Pogue, M.A., Hilmes, P.R.: Detecting Self-Generated Wake Expressions (2013). https:\/\/patents.google.com\/patent\/US9747899B2\/en. Accessed 04 Dec 2020"},{"key":"11_CR25","unstructured":"Pols, P., van den Berg, J.: The Unified Kill Chain. CSA Thesis, Hague, pp. 1\u2013104 (2017)"},{"key":"11_CR26","unstructured":"Ponticello, A.: Towards secure and usable authentication for voice-controlled smart home assistants. Ph.D. thesis, Wien (2020)"},{"key":"11_CR27","unstructured":"Statista Inc.: Smart home - Statistics & Facts (2022). https:\/\/www.statista.com\/topics\/2430\/smart-homes\/. Accessed 11 Aug 2022"},{"key":"11_CR28","unstructured":"Sugawara, T., Cyr, B., Rampazzi, S., Genkin, D., Fu, K.: Light commands: laser-based audio injection attacks on voice-controllable systems. In: 29th USENIX Security Symposium (USENIX Security 2020), pp. 2631\u20132648. USENIX Association (2020). https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/sugawara"},{"key":"11_CR29","unstructured":"The MITRE Corporation: MITRE ATT &CK (2013). https:\/\/attack.mitre.org\/. Accessed 03 Jan 2023"},{"key":"11_CR30","unstructured":"U.S. Army: A Military Guide to Terrorism in the Twenty-first Century. Cosimo reports, Cosimo, Incorporated (2010). https:\/\/books.google.it\/books?id=vmUjcAAACAAJ"},{"issue":"9","key":"11_CR31","doi-asserted-by":"publisher","first-page":"133","DOI":"10.1145\/1562164.1562198","volume":"52","author":"R Willison","year":"2009","unstructured":"Willison, R., Siponen, M.: Overcoming the insider: reducing employee computer crime through situational crime prevention. Commun. ACM 52(9), 133\u2013137 (2009)","journal-title":"Commun. ACM"},{"key":"11_CR32","doi-asserted-by":"crossref","unstructured":"Yan, Q., Liu, K., Zhou, Q., Guo, H., Zhang, N.: SurfingAttack: interactive hidden attack on voice assistants using ultrasonic guided waves. In: 27th Annual Network and Distributed System Security Symposium, NDSS 2020, San Diego, California, USA, February 23\u201326, 2020. The Internet Society (2020). https:\/\/www.ndss-symposium.org\/ndss-paper\/surfingattack-interactive-hidden-attack-on-voice-assistants-using-ultrasonic-guided-waves\/","DOI":"10.14722\/ndss.2020.24068"},{"key":"11_CR33","doi-asserted-by":"publisher","unstructured":"Zhang, G., Yan, C., Ji, X., Zhang, T., Zhang, T., Xu, W.: DolphinAttack: inaudible voice commands. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. CCS 2017, pp. 103\u2013117, New York, NY, USA. Association for Computing Machinery (2017). https:\/\/doi.org\/10.1145\/3133956.3134052","DOI":"10.1145\/3133956.3134052"},{"key":"11_CR34","doi-asserted-by":"crossref","unstructured":"Zhang, N., Mi, X., Feng, X., Wang, X., Tian, Y., Qian, F.: Dangerous skills: understanding and mitigating security risks of voice-controlled third-party functions on virtual personal assistant systems. In: 2019 IEEE Symposium on Security and Privacy (SP), pp. 1381\u20131396 (2019)","DOI":"10.1109\/SP.2019.00016"}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2023 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-54129-2_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,11]],"date-time":"2024-03-11T22:05:04Z","timestamp":1710194704000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-54129-2_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031541285","9783031541292"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-54129-2_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"12 March 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Hague","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Netherlands","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 September 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 September 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2023.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"478","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"93","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3-4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"10","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}