Inaudible Voice Commands: The Long-Range Attack and Defense
summary
Paper demonstrates a practical inaudible command that reaches 25 ft range (24–30 ft for wake-word, shorter for full-sentence) using a hexagonal array of 61 piezoelectric speakers driven up to 6 W and an optimized frequency‑chopping algorithm that minimizes audible low‑frequency leakage by exploiting the human hearing threshold. Attack reliably triggers Amazon Echo, iPhone Siri and Samsung assistants; range grows with amplifier power. Defense is a software forensic called LipRead that uses sub‑50 Hz energy, correlation, and DC‑bias features to detect attacks with ~99% accuracy.
AI-written summary · about
chapters (6)
- 0:00Inaudible acoustic attacks
- 2:50Mechanism of microphone
- 6:43Long-range attack design
- 11:27Experimental evaluation
- 13:37Defending against attacks
- 16:59Conclusion and Q&A
related talks
06mUsing Sonar for Liveness Detection to Protect Smart Speakers against Remote Attackers
30mHidden Voice Commands
24mCommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition
06mAnti-Spoofing Voice Commands: A Generic Wireless Assisted Design
45mAnalogy Cyber Security—From 0101 to Mixed Signals
39m Put Words In My Mouth
13mMy Voice Is Your Command: The Perils of Smart Voice Assistants
48mSecurity Vulnerabilities in AI Assistant Based Applications
