{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T17:47:57Z","timestamp":1772041677517,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":38,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation (NSF)","award":["2226339"],"award-info":[{"award-number":["2226339"]}]},{"name":"National Science Foundation (NSF)","award":["2129164"],"award-info":[{"award-number":["2129164"]}]},{"name":"National Science Foundation (NSF)","award":["2228617"],"award-info":[{"award-number":["2228617"]}]},{"name":"National Science Foundation (NSF)","award":["2237238"],"award-info":[{"award-number":["2237238"]}]},{"name":"National Science Foundation (NSF)","award":["2329704"],"award-info":[{"award-number":["2329704"]}]},{"name":"National Science Foundation (NSF)","award":["2239605"],"award-info":[{"award-number":["2239605"]}]},{"name":"National Science Foundation (NSF)","award":["2228616"],"award-info":[{"award-number":["2228616"]}]},{"name":"National Science Foundation (NSF)","award":["2114920"],"award-info":[{"award-number":["2114920"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3657010","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T11:51:38Z","timestamp":1719575498000},"page":"654-666","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Command Hijacking on Voice-Controlled IoT in Amazon Alexa Platform"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-0867-2245","authenticated-orcid":false,"given":"Wenbo","family":"Ding","sequence":"first","affiliation":[{"name":"University at Buffalo, Buffalo, NY, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5264-7573","authenticated-orcid":false,"given":"Song","family":"Liao","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-4819-5406","authenticated-orcid":false,"given":"Long","family":"Cheng","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8747-5601","authenticated-orcid":false,"given":"Xianghang","family":"Mi","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4930-5556","authenticated-orcid":false,"given":"Ziming","family":"Zhao","sequence":"additional","affiliation":[{"name":"University at Buffalo, Buffalo, NY, United State"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8710-247X","authenticated-orcid":false,"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[{"name":"University at Buffalo, Buffalo, NY, United State"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Virtual assistant technology - statistics facts. https:\/\/www.statista.com\/topics\/5572\/virtual-assistants\/."},{"key":"e_1_3_2_1_2_1","unstructured":"Alexa. About alexa-hosted skills. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/host-a-custom-skill-as-an-aws-lambda\\-function.html."},{"key":"e_1_3_2_1_3_1","unstructured":"Alexa. Create the interaction model for your skill. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/create-the-interaction-model-for-your-skill.html."},{"key":"e_1_3_2_1_4_1","unstructured":"Alexa. Host a custom skill as an aws lambda function. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/hosted-skills\/build-a-skill-end-to-end-using-an-alexa\\-hosted-skill.html."},{"key":"e_1_3_2_1_5_1","unstructured":"Alexa. Implement canfulfillintentrequest for name-free interactions. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/implement-canfulfillintentrequest-for-name\\-free-interaction.html."},{"key":"e_1_3_2_1_6_1","unstructured":"Alexa. Is an alexa smart home device endpoint-id case sensitive? https:\/\/amazon.developer.forums.answerhub.com\/questions\/241690\/is-an-alexa-smart-home-device-endpoint-id\\protect\\discretionary{\\char\\hyphenchar\\font}{}{}case-sen.html."},{"key":"e_1_3_2_1_7_1","unstructured":"Amazon. Alexa smart home. https:\/\/www.amazon.com\/alexa-smart-home\/b?ie=UTF8&node=21442899011\/."},{"key":"e_1_3_2_1_8_1","unstructured":"Amazon. Create intents utterances and slots. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/create-intents-utterances-and-slots.html\/."},{"key":"e_1_3_2_1_9_1","unstructured":"Amazon. Understand the smart home skill api. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/smarthome\/understand-the-smart-home-skill-api.html\/."},{"key":"e_1_3_2_1_10_1","unstructured":"Amazon. What is amazon cloudwatch logs? https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/logs\/WhatIsCloudWatchLogs.html\/."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423339"},{"key":"e_1_3_2_1_12_1","unstructured":"Compustar. Cs4900-s remote start. https:\/\/www.compustar.com\/bundles\/cs4900-s\/."},{"key":"e_1_3_2_1_13_1","volume-title":"Network and Distributed System Security Symposium","author":"Ding Wenbo","year":"2021","unstructured":"Wenbo Ding, Hongxin Hu, and Long Cheng. Iotsafe: Enforcing safety and security policy withreal iot physical interaction discovery. In Network and Distributed System Security Symposium, 2021."},{"key":"e_1_3_2_1_14_1","first-page":"3","volume-title":"International Conference on Security and Privacy in Cyber-Physical Systems and Smart Vehicles","author":"Ding Wenbo","year":"2023","unstructured":"Wenbo Ding, Song Liao, Keyan Guo, Fuqiang Zhang, Long Cheng, Ziming Zhao, and Hongxin Hu. Exploring vulnerabilities in voice command skills for connected vehicles. In International Conference on Security and Privacy in Cyber-Physical Systems and Smart Vehicles, pages 3--14. Springer, 2023."},{"key":"e_1_3_2_1_15_1","unstructured":"DroneMobile. Dronemobile. https:\/\/www.amazon.com\/Firstech-LLC-DroneMobile\/dp\/B071Z28K7T\/."},{"key":"e_1_3_2_1_16_1","article-title":"Automated traceability analysis of amazon alexa skills","author":"Edu Jide","year":"2021","unstructured":"Jide Edu, Xavi Ferrer Aran, Jose Such, and Guillermo Suarez-Tangil. Skillvet: Automated traceability analysis of amazon alexa skills. IEEE Transactions on Dependable and Secure Computing, 2021.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512289"},{"key":"e_1_3_2_1_18_1","volume-title":"Smart home personal assistants: A security and privacy review. ACM Computing Surveys, 53(6)","author":"Edu Jide S.","year":"2020","unstructured":"Jide S. Edu, Jose M. Such, and Guillermo Suarez-Tangil. Smart home personal assistants: A security and privacy review. ACM Computing Surveys, 53(6), 2020."},{"key":"e_1_3_2_1_19_1","volume-title":"Alexa versus alexa: Controlling smart speakers by self-issuing voice commands. arXiv preprint arXiv:2202.08619","author":"Esposito Sergio","year":"2022","unstructured":"Sergio Esposito, Daniele Sgandurra, and Giampaolo Bella. Alexa versus alexa: Controlling smart speakers by self-issuing voice commands. arXiv preprint arXiv:2202.08619, 2022."},{"key":"e_1_3_2_1_20_1","unstructured":"Google. Hey google available on speakers. https:\/\/assistant.google.com\/platforms\/speakers\/."},{"key":"e_1_3_2_1_21_1","first-page":"2649","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Guo Zhixiu","year":"2020","unstructured":"Zhixiu Guo, Zijin Lin, Pan Li, and Kai Chen. SkillExplorer: Understanding the behavior of skills in large scale. In 29th USENIX Security Symposium (USENIX Security 20), pages 2649--2666, 2020."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"Umar Iqbal Pouneh Nikkhah Bahrami Rahmadi Trimananda Hao Cui Alexander Gamero-Garrido Daniel Dubois David Choffnes Athina Markopoulou Franziska Roesner and Zubair Shafiq. Your echos are heard: Tracking profiling and ad targeting in the amazon smart speaker ecosystem. arXiv preprint arXiv:2204.10920 2022.","DOI":"10.1145\/3618257.3624803"},{"key":"e_1_3_2_1_23_1","first-page":"2214","volume-title":"Proceedings of the 56th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","author":"Kim Young-Bum","year":"2018","unstructured":"Young-Bum Kim, Dongchan Kim, Anjishnu Kumar, and Ruhi Sarikaya. Efficient large-scale neural domain classification with personalized attention. In Proceedings of the 56th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), pages 2214--2224, 2018."},{"key":"e_1_3_2_1_24_1","first-page":"33","volume-title":"Michael Bailey. Skill Squatting Attacks on Amazon Alexa. In 27th USENIX Security Symposium (USENIX Security)","author":"Kumar Deepak","year":"2018","unstructured":"Deepak Kumar, Riccardo Paccagnella, Paul Murley, Eric Hennenfent, Joshua Mason, Adam Bates, and Michael Bailey. Skill Squatting Attacks on Amazon Alexa. In 27th USENIX Security Symposium (USENIX Security), pages 33--47, 2018."},{"key":"e_1_3_2_1_25_1","volume-title":"Noah Apthorpe, and Yuan Tian. Skillbot: Identifying risky content for children in alexa skills. ACM Transactions on Internet Technology (TOIT), 22(3):1--31","author":"Le Tu","year":"2022","unstructured":"Tu Le, Danny Yuxing Huang, Noah Apthorpe, and Yuan Tian. Skillbot: Identifying risky content for children in alexa skills. ACM Transactions on Internet Technology (TOIT), 22(3):1--31, 2022."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23111"},{"key":"e_1_3_2_1_27_1","volume-title":"Multilevel distillation of semantic knowledge for pre-training multilingual language model. arXiv preprint arXiv:2211.01200","author":"Li Mingqi","year":"2022","unstructured":"Mingqi Li, Fei Ding, Dan Zhang, Long Cheng, Hongxin Hu, and Feng Luo. Multilevel distillation of semantic knowledge for pre-training multilingual language model. arXiv preprint arXiv:2211.01200, 2022."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616650"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427250"},{"key":"e_1_3_2_1_30_1","unstructured":"Sean Murray. Using amazon echo to turn on a device after a delay? https:\/\/community.smartthings.com\/t\/using-amazon-echo-to-turn-on-a-device\\-after-a-delay\/68343\/."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380179"},{"key":"e_1_3_2_1_32_1","volume-title":"Proc. ACM Interact. Mob. Wearable Ubiquitous Technol.","author":"Shezan Faysal Hossain","year":"2020","unstructured":"Faysal Hossain Shezan, Hang Hu, Gang Wang, and Yuan Tian. Verhealth: Vetting medical voice applications through policy enforcement. Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2020."},{"issue":"3","key":"e_1_3_2_1_33_1","first-page":"1","article-title":"Demystifying the vetting process of voice-controlled skills on markets. Proceedings of the ACM on Interactive, Mobile","volume":"5","author":"Wang Dawei","year":"2021","unstructured":"Dawei Wang, Kai Chen, and Wei Wang. Demystifying the vetting process of voice-controlled skills on markets. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies, 5(3):1--28, 2021.","journal-title":"Wearable and Ubiquitous Technologies"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"crossref","first-page":"898050","DOI":"10.3389\/fdata.2022.898050","article-title":"Two-stage voice application recommender system for unhandled utterances in intelligent personal assistant","volume":"5","author":"Xiao Wei","year":"2022","unstructured":"Wei Xiao, Qian Hu, Thahir Mohamed, Zheng Gao, Xibin Gao, Radhika Arava, and Mohamed AbdelHady. Two-stage voice application recommender system for unhandled utterances in intelligent personal assistant. Frontiers in Big Data, 5:898050, 2022.","journal-title":"Frontiers in Big Data"},{"key":"e_1_3_2_1_35_1","volume-title":"ACM Computing Surveys","author":"Yan Chen","year":"2022","unstructured":"Chen Yan, Xiaoyu Ji, Kai Wang, Qinhong Jiang, Zizhi Jin, and Wenyuan Xu. A survey on voice assistant security: Attacks and countermeasures. ACM Computing Surveys, 2022."},{"key":"e_1_3_2_1_36_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Young Jeffrey","year":"2022","unstructured":"Jeffrey Young, Song Liao, Long Cheng, Hongxin Hu, and Huixing Deng. SkillDetective: Automated Policy-Violation detection of voice assistant applications in the wild. In 31st USENIX Security Symposium (USENIX Security 22), Boston, MA, August 2022. USENIX Association."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00016"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23525"}],"event":{"name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","location":"Singapore Singapore","acronym":"ASIA CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3657010","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:07Z","timestamp":1750290247000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3657010"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":38,"alternative-id":["10.1145\/3634737.3657010","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3657010","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}