LeakyPick：IoT音频间谍探测器
LeakyPick: IoT Audio Spy Detector
摘要：
灵巧家庭物联网（IoT）设备的制造商越来越多地将语音助理和音频监控功能添加到各种设备中，包括智能扬声器、电视、恒温器、安全系统和门铃。因此，这些设备中的许多都配备了麦克风，这引起了严重的隐私问题：用户可能并不总是知道音频记录何时被发送到云端，或者谁可以访问这些记录。在本文中，我们提出了LeakyPick架构，使检测的灵巧家庭设备流记录的音频到互联网上，未经用户的同意。我们的概念验证是一个LeakyPick设备，它被放置在用户的灵巧家庭中，并定期“探测”其环境中的其他设备，并监视随后的网络流量，以获得指示音频传输的统计模式。我们的原型构建在Raspberry Pi上，价格不到40美元，在检测8台具有语音助理功能的设备的音频传输时，测量准确率为94%。此外，我们使用LeakyPick识别了89个被Amazon Echo Dot误解为唤醒词的单词，导致意外的音频传输。LeakyPick为普通消费者提供了一种具有成本效益的方法来监控他们的家庭，以防止意外的音频传输到云端。
英文摘要：
Manufacturers of smart home Internet of Things (IoT) devices are increasingly adding voice assistant and audio monitoring features to a wide range of devices including smart speakers, televisions, thermostats, security systems, and doorbells. Consequently, many of these devices are equipped with microphones, raising significant privacy concerns: users may not always be aware of when audio recordings are sent to the cloud, or who may gain access to the recordings. In this paper, we present the LeakyPick architecture that enables the detection of the smart home devices that stream recorded audio to the Internet without the user's consent. Our proof-of-concept is a LeakyPick device that is placed in a user's smart home and periodically "probes" other devices in its environment and monitors the subsequent network traffic for statistical patterns that indicate audio transmission. Our prototype is built on a Raspberry Pi for less than USD40 and has a measurement accuracy of 94% in detecting audio transmissions for a collection of 8 devices with voice assistant capabilities. Furthermore, we used LeakyPick to identify 89 words that an Amazon Echo Dot misinterprets as its wake-word, resulting in unexpected audio transmission. LeakyPick provides a cost effective approach for regular consumers to monitor their homes for unexpected audio transmissions to the cloud.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
