TY - GEN
T1 - Threat modeling and analysis of voice assistant applications
AU - Cho, Geumhwan
AU - Choi, Jusop
AU - Kim, Hyoungshick
AU - Hyun, Sangwon
AU - Ryoo, Jungwoo
N1 - Funding Information:
Acknowledgments. This work was supported in part by the ITRC (IITP-2018-2015-0-00403) and the NRF (No. 2017K1A3A1A17092614). The authors would like to thank all the anonymous reviewers for their valuable feedback.
Publisher Copyright:
© Springer Nature Switzerland AG 2019.
PY - 2019
Y1 - 2019
N2 - Voice assistant is an application that helps users to interact with their devices using voice commands in a more intuitive and natural manner. Recently, many voice assistant applications have been popularly deployed on smartphones and voice-controlled smart speakers. However, the threat and security of those applications have been examined only in very few studies. In this paper, we identify potential threats to voice assistant applications and assess the risk of those threats using the STRIDE and DREAD models. Our threat modeling demonstrates that generic voice assistants can potentially have 16 security threats. To mitigate the identified threats, we also discuss several defense strategies.
AB - Voice assistant is an application that helps users to interact with their devices using voice commands in a more intuitive and natural manner. Recently, many voice assistant applications have been popularly deployed on smartphones and voice-controlled smart speakers. However, the threat and security of those applications have been examined only in very few studies. In this paper, we identify potential threats to voice assistant applications and assess the risk of those threats using the STRIDE and DREAD models. Our threat modeling demonstrates that generic voice assistants can potentially have 16 security threats. To mitigate the identified threats, we also discuss several defense strategies.
UR - http://www.scopus.com/inward/record.url?scp=85065018679&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85065018679&partnerID=8YFLogxK
U2 - 10.1007/978-3-030-17982-3_16
DO - 10.1007/978-3-030-17982-3_16
M3 - Conference contribution
AN - SCOPUS:85065018679
SN - 9783030179816
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 197
EP - 209
BT - Information Security Applications - 19th International Conference, WISA 2018, Revised Selected Papers
A2 - Kang, Brent ByungHoon
A2 - Jang, JinSoo
PB - Springer Verlag
T2 - 19th World International Conference on Information Security and Application, WISA 2018
Y2 - 23 August 2018 through 25 August 2018
ER -