Hidden Voice Commands
Date: 2016-08
Affected: Google Now, Sphinx, smartphone voice assistants
Attack vector: adversarial-input
Category: research
Severity: High

Carlini et al. (UC Berkeley/Georgetown) craft audio commands unintelligible to humans but accepted by Google Now and other ASR systems. Tested in both black-box and white-box threat models with verified physical PoCs. USENIX Security 2016.


Mitigations:

Architectural layers (MAESTRO):