Voice assistant platforms have revolutionized user interactions with connected vehicles, providing the convenience of controlling them through simple voice commands. However, this innovation also brings about significant cyber-risks to voice-controlled vehicles. This paper presents a novel attack that showcases the ability of a “malicious” skill, utilizing the skill ranking system on the Alexa platform, to hijack voice commands originally intended for a benign third-party connected vehicle skill. Through our evaluation, we demonstrate the effectiveness of this attack by successfully hijacking commonly used commands in commercial connected vehicle skills.
Exploring Vulnerabilities in Voice Command Skills for Connected Vehicles
Lect.Notes Social.Inform.
International Conference on Security and Privacy in Cyber-Physical Systems and Smart Vehicles ; 2023 ; Chicago, IL, USA October 12, 2023 - October 16, 2023
Security and Privacy in Cyber-Physical Systems and Smart Vehicles ; Kapitel : 1 ; 3-14
05.02.2024
12 pages
Aufsatz/Kapitel (Buch)
Elektronische Ressource
Englisch
VOICE COMMAND ACCEPTANCE APPARATUS AND VOICE COMMAND ACCEPTANCE METHOD
Europäisches Patentamt | 2025
|