智能音箱安全与取证研究  

Research on Smart Speaker Security and Forensics

作　　者：梁广俊 辛建芳 倪雪莉 马卓 LIANG Guangjun;XIN Jianfang;NI Xueli;MA Zhuo(Department of Computer Irformation and Cyber Security,Jiangsu Police Institute,Nanjing 210031,China;National and Local dointEnginering Laboratory of Radio Frequeny htegration and Micro Assembly Technology,Nanjing Uriversity,Postsand Telecommuniations,Narjing 21003,China;School flntligen Enginerig,Nanjing Railway Vocational and Technical College,Narjing 210o31,China;Jiangsu Eletronie Data Forensiesand Analysis Engineering Research Center,Nanjing 210031,China)

机构地区：[1]江苏警官学院计算机信息与网络安全系,南京210031 [2]南京邮电大学射频集成与微组装技术国家地方联合工程实验室,南京210003 [3]南京铁道职业技术学院智能工程学院,南京210031 [4]江苏省电子数据取证分析工程研究中心,南京210031

出　　处：《信息网络安全》2022年第10期108-113,共6页Netinfo Security

基　　金：国家自然科学基金[62202209];江苏省高等学校自然科学研究重大项目[20KJA520004];江苏省公安厅科技研究项目[2021LX009,2021KX011];江苏警官学院高层次引进人才科研启动项目[JSPI19GKZL407];南京邮电大学射频集成与微组装技术国家地方联合工程实验室开放课题[KFJJ20200201]。

摘　　要：文章首先分析了智能音箱的组成与原理和智能音箱的隐私与安全问题,并针对智能音箱的3种攻击形式及其防御方法进行研究;然后设计一个基于云—网—端的智能音箱生态系统取证框架,并给出了智能音箱取证流程,包括设备端取证、网络取证和云取证;最后采用手机端和云端两种取证方式进行验证。实验结果表明,该模型安全有效,可以准确获得智能音箱中的用户数据。This article first analyzed the composition and principle of smart speakers.On this basis,the privacy and security issues of smart speakers were discussed,focusing on three types of attacks and their defense methods on smart speakers.Then,a smart speaker ecosystem evidence collection framework based on the cloud-net-end was proposed,and a smart speaker evidence collection analysis model was further proposed.This model includes device-side forensics,network forensics and cloud forensics.Finally,the mobile phone and the cloud were used for verification.The analysis results show that the built model is safe and effective,which can accurately obtain the user data in the smart speaker.

关 键 词：智能音箱 取证 隐私保护 智能音箱安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]