{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,29]],"date-time":"2025-11-29T16:26:04Z","timestamp":1764433564462,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,14]],"date-time":"2024-04-14T00:00:00Z","timestamp":1713052800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,14]]},"DOI":"10.1145\/3639475.3640102","type":"proceedings-article","created":{"date-parts":[[2024,6,6]],"date-time":"2024-06-06T12:37:31Z","timestamp":1717677451000},"page":"34-45","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Alexa, is the skill always safe? Uncover Lenient Skill Vetting Process and Protect User Privacy at Run Time"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1621-0331","authenticated-orcid":false,"given":"Tu","family":"Le","sequence":"first","affiliation":[{"name":"University of California, Irvine, Irvine, CA, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-5742-5119","authenticated-orcid":false,"given":"Dongfang","family":"Zhao","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington, Bloomington, IN, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-7620-4142","authenticated-orcid":false,"given":"Zihao","family":"Wang","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0607-4946","authenticated-orcid":false,"given":"XiaoFeng","family":"Wang","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington, Bloomington, IN, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6435-564X","authenticated-orcid":false,"given":"Yuan","family":"Tian","sequence":"additional","affiliation":[{"name":"University of California, Los Angeles, Los Angeles, CA, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,6,6]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Fifteenth Symposium on Usable Privacy and Security ({SOUPS}","author":"Abdi Noura","year":"2019","unstructured":"Noura Abdi, Kopo M Ramokapane, and Jose M Such. 2019. More than smart speakers: security and privacy perceptions of smart home personal assistants. In Fifteenth Symposium on Usable Privacy and Security ({SOUPS} 2019). 451--466."},{"key":"e_1_3_2_1_2_1","volume-title":"Iljoo Kim, Taekkyung Oh, and Hyoungshick Kim.","author":"Ahmed Muhammad Ejaz","year":"2020","unstructured":"Muhammad Ejaz Ahmed, Il-Youp Kwak, Jun Ho Huh, Iljoo Kim, Taekkyung Oh, and Hyoungshick Kim. 2020. Void: A fast and light voice liveness detection system. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 2685--2702."},{"key":"e_1_3_2_1_3_1","unstructured":"Amazon. 2022. Amazon's Alexa tells 10-year-old child to touch penny to exposed plug socket. https:\/\/www.cnn.com\/2021\/12\/29\/business\/amazon-alexa-penny-plug-intl-scli\/index.html. Accessed: 2022-03-18."},{"key":"e_1_3_2_1_4_1","unstructured":"Amazon. 2022. Configure Permissions for Customer Information in Your Skill. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/configure-permissions-for-customer-information-in-your-skill.html."},{"key":"e_1_3_2_1_5_1","unstructured":"Amazon. 2022. Set Up the AVS Device SDK on Ubuntu. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/avs-device-sdk\/ubuntu.html."},{"key":"e_1_3_2_1_6_1","unstructured":"Amazon. 2022. What is the Alexa Voice Service? https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/alexa-voice-service\/get-started-with-alexa-voice-service.html."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Mary K Bispham Ioannis Agrafiotis and Michael Goldsmith. 2019. Nonsense attacks on google assistant and missense attacks on amazon alexa. (2019).","DOI":"10.5220\/0007309500750087"},{"key":"e_1_3_2_1_8_1","volume-title":"Smart Spies: Alexa and Google Home expose users to vishing and eavesdropping. https:\/\/www.srlabs.de\/bites\/smart-spies.","author":"Braunlein Fabian","year":"2019","unstructured":"Fabian Braunlein and Luise Frerichs. 2019. Smart Spies: Alexa and Google Home expose users to vishing and eavesdropping. https:\/\/www.srlabs.de\/bites\/smart-spies."},{"volume-title":"25th {USENIX} Security Symposium ({USENIX} Security 16). 513--530.","author":"Carlini Nicholas","key":"e_1_3_2_1_9_1","unstructured":"Nicholas Carlini, Pratyush Mishra, Tavish Vaidya, Yuankai Zhang, Micah Sherr, Clay Shields, David Wagner, and Wenchao Zhou. 2016. Hidden voice commands. In 25th {USENIX} Security Symposium ({USENIX} Security 16). 513--530."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.23055"},{"volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20). 2667--2684.","author":"Chen Yuxuan","key":"e_1_3_2_1_11_1","unstructured":"Yuxuan Chen, Xuejing Yuan, Jiangshan Zhang, Yue Zhao, Shengzhi Zhang, Kai Chen, and XiaoFeng Wang. 2020. Devil's whisper: A general approach for physical adversarial attacks against commercial black-box speech recognition devices. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 2667--2684."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423339"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2398356.2398377"},{"key":"e_1_3_2_1_14_1","unstructured":"Explosion. 2022. Spacy - industrial-strength natural language processing in python. https:\/\/spacy.io\/."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.44"},{"key":"e_1_3_2_1_16_1","unstructured":"Allen Institute for AI. 2022. Textual Entailment. https:\/\/demo.allennlp.org\/textual-entailment\/elmo-snli."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3170427.3188448"},{"key":"e_1_3_2_1_18_1","volume-title":"Skillexplorer: Understanding the behavior of skills in large scale. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 2649--2666.","author":"Guo Zhixiu","year":"2020","unstructured":"Zhixiu Guo, Zijin Lin, Pan Li, and Kai Chen. 2020. Skillexplorer: Understanding the behavior of skills in large scale. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 2649--2666."},{"volume-title":"27th {USENIX} Security Symposium ({USENIX} Security 18). 33--47.","author":"Kumar Deepak","key":"e_1_3_2_1_19_1","unstructured":"Deepak Kumar, Riccardo Paccagnella, Paul Murley, Eric Hennenfent, Joshua Mason, Adam Bates, and Michael Bailey. 2018. Skill squatting attacks on Amazon Alexa. In 27th {USENIX} Security Symposium ({USENIX} Security 18). 33--47."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274371"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3539609"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","unstructured":"Tu Le Alan Wang Yaxing Yao Yuanyuan Feng Arsalan Heydarian Norman Sadeh and Yuan Tian. 2023. Exploring Smart Commercial Building Occupants' Perceptions and Notification Preferences of Internet of Things Data Collection in the United States. In 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P). 1030--1046. 10.1109\/EuroSP57164.2023.00064","DOI":"10.1109\/EuroSP57164.2023.00064"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23111"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427250"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"crossref","unstructured":"Ajaya Neupane Nitesh Saxena Leanne M Hirshfield and Sarah E Bratt. 2019. The Crux of Voice (In) Security: A Brain Study of Speaker Legitimacy Detection.. In NDSS.","DOI":"10.14722\/ndss.2019.23206"},{"key":"e_1_3_2_1_26_1","volume-title":"A decomposable attention model for natural language inference. arXiv preprint arXiv:1606.01933","author":"Parikh Ankur P","year":"2016","unstructured":"Ankur P Parikh, Oscar T\u00e4ckstr\u00f6m, Dipanjan Das, and Jakob Uszkoreit. 2016. A decomposable attention model for natural language inference. arXiv preprint arXiv:1606.01933 (2016)."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35289-8_5"},{"key":"e_1_3_2_1_28_1","unstructured":"Grand View Research. 2020. Intelligent Virtual assistant market size report. https:\/\/developer.amazon.com\/en-US\/docs\/alexa\/custom-skills\/configure-permissions-for-customer-information-in-your-skill.html."},{"volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20). 2631--2648.","author":"Sugawara Takeshi","key":"e_1_3_2_1_29_1","unstructured":"Takeshi Sugawara, Benjamin Cyr, Sara Rampazzi, Daniel Genkin, and Kevin Fu. 2020. Light commands: laser-based audio injection attacks on voice-controllable systems. In 29th {USENIX} Security Symposium ({USENIX} Security 20). 2631--2648."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3502137"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3478101","article-title":"Demystifying the Vetting Process of Voice-controlled Skills on Markets","volume":"5","author":"Wang Dawei","year":"2021","unstructured":"Dawei Wang, Kai Chen, and Wei Wang. 2021. Demystifying the Vetting Process of Voice-controlled Skills on Markets. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies 5, 3 (2021), 1--28.","journal-title":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3345662"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576914.3587491"},{"key":"e_1_3_2_1_34_1","volume-title":"SkillDetective: Automated Policy-Violation Detection of Voice Assistant Applications in the Wild. In 31st USENIX Security Symposium (USENIX Security 22)","author":"Young Jeffrey","year":"2022","unstructured":"Jeffrey Young, Song Liao, Long Cheng, Hongxin Hu, and Huixing Deng. 2022. SkillDetective: Automated Policy-Violation Detection of Voice Assistant Applications in the Wild. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 1113--1130. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/young"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2018.8647762"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00016"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23525"}],"event":{"name":"ICSE-SEIS'24: 46th International Conference on Software Engineering: Software Engineering in Society","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"],"location":"Lisbon Portugal","acronym":"ICSE-SEIS'24"},"container-title":["Proceedings of the 46th International Conference on Software Engineering: Software Engineering in Society"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3639475.3640102","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3639475.3640102","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:53:38Z","timestamp":1750287218000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3639475.3640102"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,14]]},"references-count":37,"alternative-id":["10.1145\/3639475.3640102","10.1145\/3639475"],"URL":"https:\/\/doi.org\/10.1145\/3639475.3640102","relation":{},"subject":[],"published":{"date-parts":[[2024,4,14]]},"assertion":[{"value":"2024-06-06","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}