More than Smart Speakers: Security and Privacy Perceptions of Smart Home Personal Assistants

Abdi, N, Ramokapane M, K and Such, J (2019) More than Smart Speakers: Security and Privacy Perceptions of Smart Home Personal Assistants. In: Fifteenth Symposium on Usable Privacy and Security . pp. 451-466. (Fifteenth Symposium on Usable Privacy and Security, 12th Aug - 13th Aug 2019, Santa Clara, California, USA).

Preview

Text soups2019-abdi.pdf - Published Version Download (1MB) | Preview

Abstract

Smart Home Personal Assistants (SPA) such as Amazon Echo/Alexa and Google Home/Assistant have made our daily routines much more convenient, allowing us to complete tasks quickly and efficiently using natural language. It is believed that around 10\% of consumers around the world already own an SPA, and predictions are that ownership will keep rising. It is therefore paramount to make SPA secure and privacy-preserving. Despite the growing research on SPA security and privacy, little is known about users' security and privacy perceptions concerning SPA complex ecosystem, which involves several elements and stakeholders. To explore this, we considered the main four use case scenarios with distinctive architectural elements and stakeholders involved: using built-in skills, third-party skills, managing other smart devices, and shopping, through semi-structured interviews with SPA users. Using a grounded theory approach, we found that users have incomplete mental models of SPA, leading to different perceptions of where data is being stored, processed, and shared. Users' understanding of the SPA ecosystem is often limited to their household and the SPA vendor at most, even when using third-party skills or managing other smart home devices. This leads to incomplete threat models (few threat agents and types of attacks) and non-technical coping strategies they implement to protect themselves. We also found that users are not making the most of the shopping capabilities of SPA due to security and privacy concerns; and while users perceive SPA as intelligent and capable of learning, they would not like SPA learning everything about them. Based on these findings, we discuss design recommendations.

Item Type:	Conference or Workshop Item (Paper)
Additional Information:	More than Smart Speakers: Security and Privacy Perceptions of Smart Home Personal Assistants. Noura Abdi, King’s College London; Kopo M. Ramokapane, University of Bristol; Jose M. Such, King’s College London https://www.usenix.org/conference/soups2019/presentation/abdi. Proceedings of the Fifteenth Symposium on Usable Privacy and Security. August 12–13, 2019 • Santa Clara, CA, USA
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:	Computer Science and Mathematics
Publisher:	USENIX Security
Date of acceptance:	15 April 2019
Date of first compliant Open Access:	5 September 2025
Date Deposited:	05 Sep 2025 09:08
Last Modified:	05 Sep 2025 09:08
URI:	https://researchonline.ljmu.ac.uk/id/eprint/27082

View Item