Return
A Novel Ultrasonic Phased-Array Injection Attack on Voice-Controlled Devices
DOI:10.1109/JIOT.2026.3655361.png)
Abstract
En 中文
Ultrasonic injection attacks have emerged as a critical security threat to voice-controlled devices in the Internet of Things (IoT). However, most existing attack methods are limited to single-device, fixed-direction point-to-point attacks. For the first time, this article presents a novel ultrasonic voice injection attack method—phased array attack (PAA)—which enables flexible control of the attack direction. PAA expands the traditional point-to-point attack paradigm to a point-to-area approach, allowing any devices within a 45° sector to be attacked without physically moving the transmitting apparatus. This method significantly enhances the flexibility, scalability, and extensibility of injection attacks. PAA offers three key advantages: 1) high stealth: once deployed, it can target multiple devices; 2) high compatibility: the signal modulation process is offloaded from the hardware platform to a PC, thus avoiding limitations imposed by field-programmable gate array (FPGA)-based implementations and enabling the use of more powerful modulation algorithms; and 3) theoretical soundness: PAA employs constructive interference and nonlinear demodulation theory to enhance attack performance. To validate the feasibility and effectiveness of the proposed approach, we developed an FPGA-based prototype attack system and systematically evaluated its performance in various application scenarios. Experimental results show that the proposed method achieves a high attack success rate at distances of up to 5 m. These findings further highlight the severe physical-layer security challenges faced by voice-controlled devices in IoT environments.
Keywords:
Internet of Things (IoT)
nonlinear acoustics
ultrasonic phased array
voice-assistant security
Journal
IF:
8.9
Papers:
1.4W
Citations:
7.8W

