# A Systematic Literature Review of Information Security in Chatbots
## 3 Result  
Figure 2 shows the PRISMA flow diagram [30] for a systematic review of the security aspects of chatbots. There are three phases involved (identification, screening, and eligibility phases). During the initial identification phase, we retrieved 1193 articles from the electronic database search. After removing duplicates, 179 articles remained. The screening phase  
involved reviewing the titles and abstracts of the articles, resulting in the exclusion of 62 articles. During the eligibility phase, full-text screening was conducted on the remaining 19 articles, and 10 articles were excluded for not meeting the inclusion criteria. The nine articles that met the inclusion criteria were analyzed and synthesized to provide an overview of the major security threats and vulnerabilities associated with chatbots and the approaches that have been proposed to address them. The following presents the results of our systematic literature review. Figure 3 shows the articles and their corresponding fields relating to information security. From the systematic literature review, we have identified several articles related to security threats and vulnerabilities in chatbots. Specifically, five articles [6; 7; 8; 10; 16] were found to be related to security threats and vulnerabilities in chatbots. These articles discussed potential attacks that could compromise the security of chatbots, such as malicious input, user profiling, contextual attacks, and data breaches. The articles emphasized the importance of developers being aware of these potential vulnerabilities and taking measures to secure their systems against attacks. The review also identified seven articles [6; 7; 8; 10; 14; 16] relating to approaches proposed to address chatbot security threats and vulnerabilities. These articles proposed various solutions to mitigate security concerns relating to chatbots, such as the use of blockchain technology, the implementation of end-to-end encryption, and the provision of organizational, managerial, and technical controls in the service level agreement. The review identified one article [17] relating to determinants of continuance intention in the domain of AI assistants with a focus on information security. This article emphasized the importance of maintaining user trust and addressing privacy concerns in order to ensure the successful adoption and continued use of AI assistants. Additionally, one article [14] discussed the importance of raising cyber threat awareness and improving the cyber security of companies. It proposed an AI-based conversational bot that acts as a personal assistant to enhance cyber threat awareness and deliver the latest information and training to the employees of a company. Article [15] discussed security risks and ethical problems relating to information security in chatbot implementation. It emphasized that human behavior provides neural networks with examples of both appropriate and inappropriate behavior and proposed a mechanism for detecting socio-cultural and information security threats by monitoring the interests and motivations of users, specialists, and programmers. Figure 2: PRISMA flow diagram [30] for systematic review of security aspects of chatbots. Table 1 shows the finding and their related articles. Article [6] focuses on the security and privacy vulnerabilities in the chatbot. The article highlights the potential vulnerabilities that could compromise the security of the system and the privacy of the user. These include malicious input, user profiling, contextual attacks, and data breaches. Attackers could insert malicious input into the chatbot, such as SQL injection or cross-site scripting, to exploit vulnerabilities in the system. Chatbots could collect sensitive information about the user, such as personal data or behavioral patterns, which could be exploited by attackers for identity theft or targeted attacks.