Started Off Local, Now We're in the Cloud: Forensic Examination of the Amazon Echo Show 15 Smart Display

• URL: http://arxiv.org/abs/2408.15768v1
• Date: Wed, 28 Aug 2024 13:01:16 GMT
• Title: Started Off Local, Now We're in the Cloud: Forensic Examination of the Amazon Echo Show 15 Smart Display
• Authors: Jona Crasselt, Gaston Pugliese,
• Abstract summary: We present the first forensic examination of the Echo Show 15, Amazon's largest smart display running on Fire OS. We identify various local usage artifacts, such as searched products, streamed movies, visited websites, metadata of photos and videos. We utilize an insecurely stored token on the Echo Show 15 to obtain access to remote user artifacts in Amazon's cloud.
• Score: 0.0
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Amazon Echo is one of the most popular product families of smart speakers and displays. Considering their growing presence in modern households as well as the digital traces associated with residents' interactions with these devices, analyses of Echo products are likely to become more common for forensic investigators at "smart home" crime scenes. With this in mind, we present the first forensic examination of the Echo Show 15, Amazon's largest smart display running on Fire OS and the first Echo device with Visual ID, a face recognition feature. We unveil a non-invasive method for accessing the unencrypted file system of the Echo Show 15 based on an undocumented pinout for the eMMC interface which we discovered on the main logic board. On the device, we identify various local usage artifacts, such as searched products, streamed movies, visited websites, metadata of photos and videos as well as logged events of Visual ID about movements and users detected by the built-in camera. Furthermore, we utilize an insecurely stored token on the Echo Show 15 to obtain access to remote user artifacts in Amazon's cloud, including Alexa voice requests, calendars, contacts, conversations, photos, and videos. In this regard, we also identify new Amazon APIs through network traffic analysis of two companion apps, namely Alexa and Photos. Overall, in terms of practical relevance, our findings demonstrate a non-destructive way of data acquisition for Echo Show 15 devices as well as how to lift the scope of forensic traces from local artifacts on the device to remote artifacts stored in the cloud.

Related papers

• EchoTrack: Auditory Referring Multi-Object Tracking for Autonomous Driving [64.58258341591929]
  Auditory Referring Multi-Object Tracking (AR-MOT) is a challenging problem in autonomous driving. We put forward EchoTrack, an end-to-end AR-MOT framework with dual-stream vision transformers. We establish the first set of large-scale AR-MOT benchmarks.
  arXiv  Detail & Related papers  (2024-02-28T12:50:16Z)
• In Alexa, We Trust. Or Do We? : An analysis of People's Perception of Privacy Policies [0.0]
  Amazon Alexa is a voice-controlled application that is rapidly gaining popularity. This paper tries to explore the extent to which people are aware of the privacy policies pertaining to the Amazon Alexa devices.
  arXiv  Detail & Related papers  (2022-08-31T19:44:58Z)
• System Fingerprint Recognition for Deepfake Audio: An Initial Dataset and Investigation [51.06875680387692]
  We present the first deepfake audio dataset for system fingerprint recognition (SFR) We collected the dataset from the speech synthesis systems of seven Chinese vendors that use the latest state-of-the-art deep learning technologies.
  arXiv  Detail & Related papers  (2022-08-21T05:15:40Z)
• Finding Facial Forgery Artifacts with Parts-Based Detectors [73.08584805913813]
  We design a series of forgery detection systems that each focus on one individual part of the face. We use these detectors to perform detailed empirical analysis on the FaceForensics++, Celeb-DF, and Facebook Deepfake Detection Challenge datasets.
  arXiv  Detail & Related papers  (2021-09-21T16:18:45Z)
• PiBase: An IoT-based Security System using Raspberry Pi and Google Firebase [0.0]
  This paper addresses aspects of authorized access and intruder detection for smart environments. Proposed is PiBase, an Internet of Things (IoT)-based app that aids in detecting intruders.
  arXiv  Detail & Related papers  (2021-07-29T20:45:42Z)
• Automated Video Labelling: Identifying Faces by Corroborative Evidence [79.44208317138784]
  We present a method for automatically labelling all faces in video archives, such as TV broadcasts, by combining multiple evidence sources and multiple modalities. We provide a novel, simple, method for determining if a person is famous or not using image-search engines. We show that even for less-famous people, image-search engines can be used for corroborative evidence to accurately label faces that are named in the scene or the speech.
  arXiv  Detail & Related papers  (2021-02-10T18:57:52Z)
• Activity Recognition with Moving Cameras and Few Training Examples: Applications for Detection of Autism-Related Headbanging [1.603589863010401]
  Activity recognition computer vision algorithms can be used to detect the presence of autism-related behaviors. We document the advantages and limitations of current feature representation techniques for activity recognition when applied to head banging detection. We create a computer vision classifier for detecting head banging in home videos using a time-distributed convolutional neural network.
  arXiv  Detail & Related papers  (2021-01-10T05:37:05Z)
• The Dark (and Bright) Side of IoT: Attacks and Countermeasures for Identifying Smart Home Devices and Services [4.568911586155096]
  We build up a model describing the traffic patterns characterizing three popular IoT smart home devices. We prove that it is possible to detect and identify with overwhelming probability their presence and the services running by the aforementioned devices.
  arXiv  Detail & Related papers  (2020-09-16T13:28:59Z)
• Cross-Task Transfer for Geotagged Audiovisual Aerial Scene Recognition [61.54648991466747]
  We explore an audiovisual aerial scene recognition task using both images and sounds as input. We show the benefit of exploiting the audio information for the aerial scene recognition.
  arXiv  Detail & Related papers  (2020-05-18T04:14:16Z)
• Multi-Modal Video Forensic Platform for Investigating Post-Terrorist Attack Scenarios [55.82693757287532]
  Large scale Video Analytic Platforms (VAP) assist law enforcement agencies (LEA) in identifying suspects and securing evidence. We present a video analytic platform that integrates visual and audio analytic modules and fuses information from surveillance cameras and video uploads from eyewitnesses.
  arXiv  Detail & Related papers  (2020-04-02T14:29:27Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.