{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T04:05:32Z","timestamp":1781755532452,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":64,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,11,15]],"date-time":"2023-11-15T00:00:00Z","timestamp":1700006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Science Foundation (NSF) CCF","award":["2312616"],"award-info":[{"award-number":["2312616"]}]},{"name":"National Science Foundation (NSF) IIS","award":["1949640"],"award-info":[{"award-number":["1949640"]}]},{"name":"National Science Foundation (NSF)","award":["2239605, 2228616, 2114920, 2228617, 2120369, 2129164, 2114982,"],"award-info":[{"award-number":["2239605, 2228616, 2114920, 2228617, 2120369, 2129164, 2114982,"]}]},{"name":"National Science Foundation (NSF) CNS","award":["2008049"],"award-info":[{"award-number":["2008049"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,11,15]]},"DOI":"10.1145\/3576915.3616650","type":"proceedings-article","created":{"date-parts":[[2023,11,21]],"date-time":"2023-11-21T12:35:13Z","timestamp":1700570113000},"page":"2321-2335","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["SkillScanner: Detecting Policy-Violating Voice Applications Through Static Analysis at the Development Phase"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5264-7573","authenticated-orcid":false,"given":"Song","family":"Liao","sequence":"first","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-4819-5406","authenticated-orcid":false,"given":"Long","family":"Cheng","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5224-9970","authenticated-orcid":false,"given":"Haipeng","family":"Cai","sequence":"additional","affiliation":[{"name":"Washington State University, Pullman, WA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3658-7435","authenticated-orcid":false,"given":"Linke","family":"Guo","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8710-247X","authenticated-orcid":false,"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[{"name":"University at Buffalo, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,11,21]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Alexa Certification Tests for VUI and UX. https:\/\/developer.amazon.com\/fr-FR\/docs\/alexa\/custom-skills\/voice-interface-and-user-experience-testing-for-a-custom-skill.html."},{"key":"e_1_3_2_1_2_1","unstructured":"Alexa Permissions. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/configure-permissions-for-customer-information-in-your-skill.html."},{"key":"e_1_3_2_1_3_1","unstructured":"Alexa Policy for Child-Directed skill. https:\/\/developer.amazon.com\/fr-FR\/docs\/ alexa\/custom-skills\/policy-testing-for-an-alexa-skill.html#cert-child-directed."},{"key":"e_1_3_2_1_4_1","unstructured":"Alexa Policy for Health skill. https:\/\/developer.amazon.com\/fr-FR\/docs\/alexa\/ custom-skills\/policy-testing-for-an-alexa-skill.html#3-health."},{"key":"e_1_3_2_1_5_1","unstructured":"Alexa Skill Counts Surpass 80K in US. https:\/\/voicebot.ai\/2021\/01\/14\/alexa-skill-counts-surpass-80k-in-us-spain-adds-the-most-skills-new-skill-introduction-rate-continues-to-fall-across-countries."},{"key":"e_1_3_2_1_6_1","unstructured":"Alexa Skills Policy Testing. https:\/\/developer.amazon.com\/fr\/docs\/custom-skills\/policy-testing-for-an-alexa-skill.html."},{"key":"e_1_3_2_1_7_1","unstructured":"Alexa Skills Privacy Requirements. https:\/\/developer.amazon.com\/fr\/docs\/custom-skills\/security-testing-for-an-alexa-skill.html#25-privacy-requirements."},{"key":"e_1_3_2_1_8_1","unstructured":"CodeQL. https:\/\/codeql.github.com\/."},{"key":"e_1_3_2_1_9_1","unstructured":"copydetect. https:\/\/github.com\/blingenf\/copydetect."},{"key":"e_1_3_2_1_10_1","unstructured":"First Alexa Third-Party Skills Now Available for Amazon Echo. https:\/\/developer.amazon.com\/es\/blogs\/alexa\/post\/TxC2VHKFEIZ9SG\/first-alexa-third-party-skills-now-available-for-amazon-echo."},{"key":"e_1_3_2_1_11_1","unstructured":"Perspective. https:\/\/www.perspectiveapi.com\/home."},{"key":"e_1_3_2_1_12_1","unstructured":"pytesseract 0.3.7. https:\/\/pypi.org\/project\/pytesseract\/."},{"key":"e_1_3_2_1_13_1","unstructured":"Qualitrics. https:\/\/www.qualtrics.com\/."},{"key":"e_1_3_2_1_14_1","unstructured":"Sensitive data types: Personal information. https:\/\/docs.aws.amazon.com\/macie\/ latest\/user\/managed-data-identifiers.html#managed-data-identifiers-pii."},{"key":"e_1_3_2_1_15_1","unstructured":"Skill Account Linking Schemas. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/smapi\/account-linking-schemas.html."},{"key":"e_1_3_2_1_16_1","unstructured":"Skill Interaction Model Schemas. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/smapi\/interaction-model-schema.html."},{"key":"e_1_3_2_1_17_1","unstructured":"Skill Manifest Schema. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/smapi\/skill-manifest.html."},{"key":"e_1_3_2_1_18_1","unstructured":"Skill Package Format. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/hosted-skills\/alexa-hosted-skills-git-import.html."},{"key":"e_1_3_2_1_19_1","unstructured":"Skill Slot Type Reference. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/slot-type-reference.html."},{"key":"e_1_3_2_1_20_1","unstructured":"Skill Standard Built-in Intents. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/standard-built-in-intents.html."},{"key":"e_1_3_2_1_21_1","unstructured":"spaCy. https:\/\/spacy.io."},{"key":"e_1_3_2_1_22_1","unstructured":"SpeechRecognition 3.8.1. https:\/\/pypi.org\/project\/SpeechRecognition\/."},{"key":"e_1_3_2_1_23_1","unstructured":"VirusTotal. https:\/\/www.virustotal.com\/gui\/home\/search."},{"key":"e_1_3_2_1_24_1","volume-title":"SOUPS@ USENIX Security Symposium","author":"Abdi Noura","year":"2019","unstructured":"Noura Abdi, Kopo M Ramokapane, and Jose M Such. More than smart speakers: Security and privacy perceptions of smart home personal assistants. In SOUPS@ USENIX Security Symposium, 2019."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00014"},{"key":"e_1_3_2_1_26_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Ahmed Shimaa","year":"2022","unstructured":"Shimaa Ahmed, Ilia Shumailov, Nicolas Papernot, and Kassem Fawaz. Towards more robust keyword spotting for voice assistants. In 31st USENIX Security Symposium (USENIX Security 22), 2022."},{"key":"e_1_3_2_1_27_1","volume-title":"search, and iot: How people (really) use voice assistants. ACM Transactions on Computer-Human Interaction (TOCHI), 26(3):1--28","author":"Ammari Tawfiq","year":"2019","unstructured":"Tawfiq Ammari, Jofish Kaye, Janice Y. Tsai, and Frank Bentley. Music, search, and iot: How people (really) use voice assistants. ACM Transactions on Computer-Human Interaction (TOCHI), 26(3):1--28, 2019."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-013-0190-7"},{"key":"e_1_3_2_1_29_1","first-page":"513","volume-title":"USENIX Security Symposium (USENIX Security)","author":"Carlini Nicholas","year":"2016","unstructured":"Nicholas Carlini, Pratyush Mishra, Tavish Vaidya, Yuankai Zhang, Micah Sherr, Clay Shields, David Wagner, and Wenchao Zhou. Hidden voice commands. In USENIX Security Symposium (USENIX Security), pages 513--530, 2016."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00004"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485365"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423339"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2022.3153167"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.3571053"},{"key":"e_1_3_2_1_35_1","article-title":"Automated traceability analysis of amazon alexa skills","author":"Edu Jide","year":"2021","unstructured":"Jide Edu, Xavi Ferrer Aran, Jose Such, and Guillermo Suarez-Tangil. Skillvet: Automated traceability analysis of amazon alexa skills. IEEE Transactions on Dependable and Secure Computing, 2021.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512289"},{"key":"e_1_3_2_1_37_1","volume-title":"Smart home personal assistants: A security and privacy review. ACM Computing Surveys, 53(6)","author":"Edu Jide S.","year":"2020","unstructured":"Jide S. Edu, Jose M. Such, and Guillermo Suarez-Tangil. Smart home personal assistants: A security and privacy review. ACM Computing Surveys, 53(6), 2020."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3497766"},{"key":"e_1_3_2_1_39_1","first-page":"2649","volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20)","author":"Guo Zhixiu","year":"2020","unstructured":"Zhixiu Guo, Zijin Lin, Pan Li, and Kai Chen. Skillexplorer: Understanding the behavior of skills in large scale. In 29th {USENIX} Security Symposium ({USENIX} Security 20), pages 2649--2666, 2020."},{"key":"e_1_3_2_1_40_1","first-page":"33","volume-title":"Michael Bailey. Skill Squatting Attacks on Amazon Alexa. In 27th USENIX Security Symposium (USENIX Security)","author":"Kumar Deepak","year":"2018","unstructured":"Deepak Kumar, Riccardo Paccagnella, Paul Murley, Eric Hennenfent, Joshua Mason, Adam Bates, and Michael Bailey. Skill Squatting Attacks on Amazon Alexa. In 27th USENIX Security Symposium (USENIX Security), pages 33--47, 2018."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23111"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3556957"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427250"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0116"},{"key":"e_1_3_2_1_45_1","first-page":"633","volume-title":"Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022","author":"Malkin Nathan","year":"2022","unstructured":"Nathan Malkin, David Wagner, and Serge Egelman. Runtime permissions for privacy in proactive intelligent assistants. In Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022), pages 633--651, 2022."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-122"},{"key":"e_1_3_2_1_47_1","volume-title":"USENIX Security","author":"Meng Yan","year":"2022","unstructured":"Yan Meng, Jiachun Li, Matthew Pillari, Arjun Deopujari, Liam Brennan, Hafsah Shamsie, Haojin Zhu, and Yuan Tian. Your microphone array retains your identity: A robust voice liveness detection system for smart speaker. In USENIX Security, 2022."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1186\/s12911-017-0535-0"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3517510"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3210459.3210484"},{"key":"e_1_3_2_1_51_1","first-page":"3379","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Sharma Vandit","year":"2022","unstructured":"Vandit Sharma and Mainack Mondal. Understanding and improving usability of data dashboards for simplified privacy control of voice assistant data. In 31st USENIX Security Symposium (USENIX Security 22), pages 3379--3395, 2022."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568244"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3432233"},{"key":"e_1_3_2_1_54_1","volume-title":"arXiv preprint arXiv:2010.10788","author":"Su Dan","year":"2020","unstructured":"Dan Su, Jiqiang Liu, Sencun Zhu, Xiaoyang Wang, and Wei Wang. \"are you home alone?\" yes\" disclosing security and privacy vulnerabilities in alexa skills. arXiv preprint arXiv:2010.10788, 2020."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3478101"},{"key":"e_1_3_2_1_56_1","volume-title":"Ghosttalk: Interactive attack on smartphone voice system through power line. arXiv preprint arXiv:2202.02585","author":"Wang Yuanda","year":"2022","unstructured":"Yuanda Wang, Hanqing Guo, and Qiben Yan. Ghosttalk: Interactive attack on smartphone voice system through power line. arXiv preprint arXiv:2202.02585, 2022."},{"key":"e_1_3_2_1_57_1","volume-title":"ACM Computing Surveys","author":"Yan Chen","year":"2022","unstructured":"Chen Yan, Xiaoyu Ji, Kai Wang, Qinhong Jiang, Zizhi Jin, and Wenyuan Xu. A survey on voice assistant security: Attacks and countermeasures. ACM Computing Surveys, 2022."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24068"},{"key":"e_1_3_2_1_59_1","volume-title":"USENIX Security Symposium (USENIX Security)","author":"Young Jeffrey","year":"2022","unstructured":"Jeffrey Young, Song Liao, Long Cheng, Hongxin Hu, and Huixing Deng. SkillDe- tective: Automated policy-violation detection of voice assistant applications in the wild. In USENIX Security Symposium (USENIX Security), 2022."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.55"},{"key":"e_1_3_2_1_61_1","first-page":"103","volume-title":"ACM SIGSAC Conference on Computer and Communications Security (CCS)","author":"Zhang Guoming","year":"2017","unstructured":"Guoming Zhang, Chen Yan, Xiaoyu Ji, Tianchen Zhang, Taimin Zhang, and Wenyuan Xu. Dolphinattack: Inaudible voice commands. In ACM SIGSAC Conference on Computer and Communications Security (CCS), pages 103--117, 2017."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00016"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23525"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274469"}],"event":{"name":"CCS '23: ACM SIGSAC Conference on Computer and Communications Security","location":"Copenhagen Denmark","acronym":"CCS '23","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3576915.3616650","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3576915.3616650","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T01:47:20Z","timestamp":1755740840000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3576915.3616650"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,15]]},"references-count":64,"alternative-id":["10.1145\/3576915.3616650","10.1145\/3576915"],"URL":"https:\/\/doi.org\/10.1145\/3576915.3616650","relation":{},"subject":[],"published":{"date-parts":[[2023,11,15]]},"assertion":[{"value":"2023-11-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}