Search

Voice assistants (VAs) such as Siri and Google Now have become an increasingly popular human-machine interaction method and have made various systems voice controllable. Prior work on attacking voice assistants shows that the hidden voice commands that are incomprehensible to people can control the VAs. Hidden voice commands, though ‘hidden’, are nonetheless audible. In this work, we design a completely inaudible attack, DolphinAttack, that modulates voice commands on ultrasonic carriers to achieve inaudibility. By leveraging the nonlinearity of the microphone circuits, the modulated low-frequency audio commands can be successfully demodulated, recovered, and more importantly interpreted by the voice assistants. We validate DolphinAttack on popular voice assistants, including Siri, Google Now, S Voice, HiVoice, Cortana, Alexa, etc. By injecting a sequence of inaudible voice commands, we show a few proof-of-concept attacks, which include activating Siri to initiate a FaceTime call on iPhone, activating Google Now to turn on the airplane mode, and even manipulating the navigation system in an Audi automobile. We propose hardware and software defense solutions. We validate that it is feasible to detect DolphinAttack by classifying the audios using supported vector machine (SVM), and suggest to re-design voice assistants to be resilient to inaudible voice command attacks.

To make sure that high performance Microchannel Plate (HP-MCP) can be applied successfully in Gen III Image Intensifier, vacuum baking test and trying out test are carried out first, then making ion barrier film onto input surface of HP-MCP, employing strict electron scrubbing test, and measuring resistance, gain in each stage, finally Gen III Image intensifier is manufactured with HP-MCP. As a result, many data concerning with HP-MCP are gained and the conclusions indicate: the HP-MCP can be applied in Gen III Image Intensifier, and can manufacture qualified product; thinking over batch production in the future, studying on the MCP' material and technique especially in compatibility between HP MCP and Gen III image intensifier is enhanced.