{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,2]],"date-time":"2025-08-02T16:42:10Z","timestamp":1754152930006,"version":"3.41.2"},"reference-count":38,"publisher":"Association for Computing Machinery (ACM)","issue":"4","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Sen. Netw."],"published-print":{"date-parts":[[2025,7,31]]},"abstract":"<jats:p>\n            Recent studies show that inaudible attacks pose a non-negligible security risk to smart speakers. While several countermeasures have been proposed to detect the occurrence of the inaudible attack passively, accurately locating the attack source in 3D free space remains an unresolved challenge.\n            <jats:sc>Arrow<\/jats:sc>\n            \u00a0is designed to bridge this gap by attempting to detect the occurrence of inaudible attacks and determine their localization simultaneously. Instead of relying on dedicated hardware components,\n            <jats:sc>Arrow<\/jats:sc>\n            \u00a0is implemented with the microphone array widely deployed on COTS (Commercial Off-The-Shelf) smart speakers. Throughout the spatial information captured by the microphone array,\n            <jats:sc>Arrow<\/jats:sc>\n            \u00a0establishes a spatial mapping model and derives orientation-related features to pinpoint the location of the attack source. Furthermore, to improve the robustness against co-channel interference,\n            <jats:sc>Arrow<\/jats:sc>\n            \u00a0adopt carefully-modulated ultrasonic waveforms to achieve noise-robust attack detection. Through the above technical mechanism,\n            <jats:sc>Arrow<\/jats:sc>\n            \u00a0can significantly improve the security level of voice assistants on smart speakers with nearly zero deployment cost. We implement a prototype of\n            <jats:sc>Arrow<\/jats:sc>\n            and conduct a comprehensive performance evaluation. The results show\n            <jats:sc>Arrow<\/jats:sc>\n            can achieve 2.5\n            <jats:sup>\u25cb<\/jats:sup>\n            and 7\n            <jats:sup>\u25cb<\/jats:sup>\n            error in DoA estimation for horizontal and vertical angles, respectively.\n          <\/jats:p>","DOI":"10.1145\/3744342","type":"journal-article","created":{"date-parts":[[2025,6,10]],"date-time":"2025-06-10T07:34:41Z","timestamp":1749540881000},"page":"1-21","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Location-aware Inaudible Attack Defense Towards Smart Speakers"],"prefix":"10.1145","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1343-8768","authenticated-orcid":false,"given":"Ping","family":"Li","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Anhui University","place":["Hefei, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-8523-4438","authenticated-orcid":false,"given":"Xinrui","family":"He","sequence":"additional","affiliation":[{"name":"Anhui University","place":["Hefei, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2692-6242","authenticated-orcid":false,"given":"Zhenfei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Anhui University","place":["Hefei, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7555-1232","authenticated-orcid":false,"given":"Feiyu","family":"Han","sequence":"additional","affiliation":[{"name":"Nanjing University of Information Science and Technology","place":["Nanjing, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1057-2793","authenticated-orcid":false,"given":"Panlong","family":"Yang","sequence":"additional","affiliation":[{"name":"Nanjing University of Information Science and Technology","place":["Nanjing, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4530-4422","authenticated-orcid":false,"given":"Zhao","family":"Lv","sequence":"additional","affiliation":[{"name":"Anhui University","place":["Hefei, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,7,22]]},"reference":[{"key":"e_1_3_1_2_2","first-page":"2685","volume-title":"Proceedings of the 29th USENIX Security Symposium","author":"Ahmed Muhammad Ejaz","year":"2020","unstructured":"Muhammad Ejaz Ahmed, Il-Youp Kwak, Jun Ho Huh, Iljoo Kim, Taekkyung Oh, and Hyoungshick Kim. 2020. Void: A fast and light voice liveness detection system. In Proceedings of the 29th USENIX Security Symposium. 2685\u20132702."},{"key":"e_1_3_1_3_2","doi-asserted-by":"publisher","DOI":"10.1109\/TASSP.1984.1164314"},{"key":"e_1_3_1_4_2","doi-asserted-by":"publisher","unstructured":"Zhongjie Ba Bin Gong Yuwei Wang Yuxuan Liu and Zhao Lv. 2024. Indelible \u2018Footprints\u2019 of Inaudible command injection. IEEE Transactions on Information Forensics and Security 19 (2024) 8485\u20138499. DOI:10.1109\/TIFS.2024.3459728","DOI":"10.1109\/TIFS.2024.3459728"},{"key":"e_1_3_1_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3498361.3539775"},{"key":"e_1_3_1_6_2","doi-asserted-by":"publisher","DOI":"10.1155\/S1110865703212038"},{"key":"e_1_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/2666620.2666623"},{"key":"e_1_3_1_8_2","doi-asserted-by":"publisher","DOI":"10.2478\/v10168-011-0031-y"},{"key":"e_1_3_1_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2022.3210150"},{"key":"e_1_3_1_10_2","doi-asserted-by":"publisher","DOI":"10.1145\/3458864.3467880"},{"key":"e_1_3_1_11_2","doi-asserted-by":"publisher","DOI":"10.1145\/3560905.3568522"},{"key":"e_1_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2023.3314837"},{"issue":"1","key":"e_1_3_1_13_2","first-page":"27","article-title":"Distortion correction in audio power amplifiers","volume":"29","author":"Hawksford Malcolm J","year":"1981","unstructured":"Malcolm J Hawksford. 1981. Distortion correction in audio power amplifiers. Journal of the Audio Engineering Society 29, 1\/2 (1981), 27\u201330.","journal-title":"Journal of the Audio Engineering Society"},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/3300061.3345429"},{"key":"e_1_3_1_15_2","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485389"},{"key":"e_1_3_1_16_2","first-page":"778","volume-title":"Proceedings of the 2007 15th European Signal Processing Conference","author":"Karbasi Amin","year":"2007","unstructured":"Amin Karbasi and Akihiko Sugiyama. 2007. A new DOA estimation method using a circular microphone array. In Proceedings of the 2007 15th European Signal Processing Conference. IEEE, 778\u2013782."},{"key":"e_1_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/3522783.3529523"},{"key":"e_1_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2015.7108422"},{"key":"e_1_3_1_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/2426656.2426667"},{"key":"e_1_3_1_20_2","doi-asserted-by":"publisher","DOI":"10.1145\/3380991"},{"key":"e_1_3_1_21_2","first-page":"2455","volume-title":"Proceedings of the 32nd USENIX Security Symposium","author":"Li Xinfeng","year":"2023","unstructured":"Xinfeng Li, Xiaoyu Ji, Chen Yan, Chaohao Li, Yichen Li, Zhenning Zhang, and Wenyuan Xu. 2023. Learning normality is enough: A software-based mitigation against inaudible voice attacks. In Proceedings of the 32nd USENIX Security Symposium. 2455\u20132472."},{"key":"e_1_3_1_22_2","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484755"},{"key":"e_1_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICC42927.2021.9500456"},{"key":"e_1_3_1_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCW.2017.7962796"},{"key":"e_1_3_1_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2006.65"},{"key":"e_1_3_1_26_2","first-page":"1077","volume-title":"Proceedings of the 31st USENIX Security Symposium","author":"Meng Yan","year":"2022","unstructured":"Yan Meng, Jiachun Li, Matthew Pillari, Arjun Deopujari, Liam Brennan, Hafsah Shamsie, Haojin Zhu, and Yuan Tian. 2022. Your microphone array retains your identity: A robust voice liveness detection system for smart speakers. In Proceedings of the 31st USENIX Security Symposium. 1077\u20131094."},{"key":"e_1_3_1_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/1322263.1322265"},{"key":"e_1_3_1_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/345910.345917"},{"key":"e_1_3_1_29_2","doi-asserted-by":"publisher","DOI":"10.1145\/3081333.3081366"},{"key":"e_1_3_1_30_2","first-page":"547","volume-title":"Proceedings of the 15th USENIX Symposium on Networked Systems Design and Implementation","author":"Roy Nirupam","year":"2018","unstructured":"Nirupam Roy, Sheng Shen, Haitham Hassanieh, and Romit Roy Choudhury. 2018. Inaudible voice commands: The long-range attack and defense. In Proceedings of the 15th USENIX Symposium on Networked Systems Design and Implementation. 547\u2013560."},{"key":"e_1_3_1_31_2","volume-title":"Audio Power Amplifier Design Handbook","author":"Self Douglas","year":"2012","unstructured":"Douglas Self. 2012. Audio Power Amplifier Design Handbook. Routledge."},{"key":"e_1_3_1_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/3372224.3380884"},{"key":"e_1_3_1_33_2","first-page":"2631","volume-title":"Proceedings of the 29th USENIX Security Symposium","author":"Sugawara Takeshi","year":"2020","unstructured":"Takeshi Sugawara, Benjamin Cyr, Sara Rampazzi, Daniel Genkin, and Kevin Fu. 2020. Light commands: Laser-based audio injection attacks on \\(\\lbrace\\) Voice-controllable \\(\\rbrace\\) systems. In Proceedings of the 29th USENIX Security Symposium. 2631\u20132648."},{"key":"e_1_3_1_34_2","doi-asserted-by":"publisher","DOI":"10.1145\/3384419.3430724"},{"key":"e_1_3_1_35_2","first-page":"1","volume-title":"Proceedings of the Novem2009: Noise and Vibration: Emerging Methods","author":"Wind Jelmer","year":"2009","unstructured":"Jelmer Wind, Emiel Tijs, and Hans-Elias de Bree. 2009. Source localization using acoustic vector sensors: A MUSIC approach. In Proceedings of the Novem2009: Noise and Vibration: Emerging Methods. ISVR, 1\u201310."},{"key":"e_1_3_1_36_2","doi-asserted-by":"publisher","DOI":"10.3390\/s19112554"},{"key":"e_1_3_1_37_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24068"},{"key":"e_1_3_1_38_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24551"},{"key":"e_1_3_1_39_2","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"}],"container-title":["ACM Transactions on Sensor Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3744342","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,22]],"date-time":"2025-07-22T13:35:59Z","timestamp":1753191359000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3744342"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,22]]},"references-count":38,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2025,7,31]]}},"alternative-id":["10.1145\/3744342"],"URL":"https:\/\/doi.org\/10.1145\/3744342","relation":{},"ISSN":["1550-4859","1550-4867"],"issn-type":[{"type":"print","value":"1550-4859"},{"type":"electronic","value":"1550-4867"}],"subject":[],"published":{"date-parts":[[2025,7,22]]},"assertion":[{"value":"2024-11-14","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-06-04","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-07-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}