{"id":"https://openalex.org/W3134845252","doi":"https://doi.org/10.1109/tdsc.2021.3129116","title":"SkillVet: Automated Traceability Analysis of Amazon Alexa Skills","display_name":"SkillVet: Automated Traceability Analysis of Amazon Alexa Skills","publication_year":2021,"publication_date":"2021-11-18","ids":{"openalex":"https://openalex.org/W3134845252","doi":"https://doi.org/10.1109/tdsc.2021.3129116","mag":"3134845252"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2021.3129116","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3129116","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2103.02637","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051459324","display_name":"Jide Edu","orcid":"https://orcid.org/0000-0003-1325-8740"},"institutions":[{"id":"https://openalex.org/I4210119896","display_name":"King's College School","ror":"https://ror.org/02bbqcn27","country_code":"GB","type":"education","lineage":["https://openalex.org/I4210119896"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Jide S. Edu","raw_affiliation_strings":["King&#x0027;s College (KCL) London, London, U.K"],"affiliations":[{"raw_affiliation_string":"King&#x0027;s College (KCL) London, London, U.K","institution_ids":["https://openalex.org/I4210119896"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011918557","display_name":"Xavier Ferrer","orcid":"https://orcid.org/0000-0001-7278-7373"},"institutions":[{"id":"https://openalex.org/I4210119896","display_name":"King's College School","ror":"https://ror.org/02bbqcn27","country_code":"GB","type":"education","lineage":["https://openalex.org/I4210119896"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Xavier Ferrer-Aran","raw_affiliation_strings":["King&#x0027;s College (KCL) London, London, U.K"],"affiliations":[{"raw_affiliation_string":"King&#x0027;s College (KCL) London, London, U.K","institution_ids":["https://openalex.org/I4210119896"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052525506","display_name":"Jos\u00e9 M. Such","orcid":"https://orcid.org/0000-0002-6041-178X"},"institutions":[{"id":"https://openalex.org/I4210119896","display_name":"King's College School","ror":"https://ror.org/02bbqcn27","country_code":"GB","type":"education","lineage":["https://openalex.org/I4210119896"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jose Such","raw_affiliation_strings":["King&#x0027;s College (KCL) London, London, U.K"],"affiliations":[{"raw_affiliation_string":"King&#x0027;s College (KCL) London, London, U.K","institution_ids":["https://openalex.org/I4210119896"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081640013","display_name":"Guillermo Suarez-Tangi","orcid":null},"institutions":[{"id":"https://openalex.org/I2802499160","display_name":"IMDEA Networks","ror":"https://ror.org/04mm9fg30","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I2802499160"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Guillermo Suarez-Tangil","raw_affiliation_strings":["IMDEA Networks Institute, Legan&#x00E9;s, Spain"],"affiliations":[{"raw_affiliation_string":"IMDEA Networks Institute, Legan&#x00E9;s, Spain","institution_ids":["https://openalex.org/I2802499160"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5051459324"],"corresponding_institution_ids":["https://openalex.org/I4210119896"],"apc_list":null,"apc_paid":null,"fwci":1.5169,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.86264097,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":"20","issue":"1","first_page":"161","last_page":"175"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/traceability","display_name":"Traceability","score":0.8491727709770203},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7412891983985901},{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.6712877154350281},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4691518545150757},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4172002971172333},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.38600870966911316},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36586591601371765},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3500053584575653},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.18081286549568176}],"concepts":[{"id":"https://openalex.org/C153876917","wikidata":"https://www.wikidata.org/wiki/Q899704","display_name":"Traceability","level":2,"score":0.8491727709770203},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7412891983985901},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.6712877154350281},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4691518545150757},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4172002971172333},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.38600870966911316},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36586591601371765},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3500053584575653},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.18081286549568176},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1109/tdsc.2021.3129116","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3129116","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2103.02637","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2103.02637","pdf_url":"https://arxiv.org/pdf/2103.02637","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:kclpure.kcl.ac.uk:openaire/ff559ab9-6d48-440e-a479-17b5fb4ff4dd","is_oa":true,"landing_page_url":"https://kclpure.kcl.ac.uk/portal/en/publications/ff559ab9-6d48-440e-a479-17b5fb4ff4dd","pdf_url":"https://kclpure.kcl.ac.uk/ws/files/166902709/edu2021skillvet.pdf","source":{"id":"https://openalex.org/S4306400216","display_name":"Research Portal (King's College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I183935753","host_organization_name":"King's College London","host_organization_lineage":["https://openalex.org/I183935753"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Edu, J S, Ferrer-Aran, X, Such, J M & Suarez-Tangi, G 2021, 'SkillVet : Automated Traceability Analysis of Amazon Alexa Skills', IEEE Transactions on Dependable and Secure Computing. https://doi.org/10.1109/TDSC.2021.3129116","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:strathprints.strath.ac.uk:85106","is_oa":true,"landing_page_url":"https://strathprints.strath.ac.uk/view/author/1497088.html>","pdf_url":"https://strathprints.strath.ac.uk/85106/1/Edu_etal_TDSC_2023_Automated_traceability_analysis_of_Amazon_Alexa_skills.pdf","source":{"id":"https://openalex.org/S4306402226","display_name":"Strathprints: The University of Strathclyde institutional repository (University of Strathclyde)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I181647926","host_organization_name":"University of Strathclyde","host_organization_lineage":["https://openalex.org/I181647926"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},{"id":"mag:3134845252","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2103.02637.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2103.02637","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2103.02637","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2103.02637","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2103.02637","pdf_url":"https://arxiv.org/pdf/2103.02637","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4","score":0.8500000238418579}],"awards":[{"id":"https://openalex.org/G1361938442","display_name":null,"funder_award_id":"Fellowship","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G1946144665","display_name":null,"funder_award_id":"EP/T026723/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G2132529326","display_name":"SAIS: Secure AI assistantS","funder_award_id":"EP/T026723/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"},{"id":"https://openalex.org/F4320335413","display_name":"Petroleum Technology Development Fund","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W1434018057","https://openalex.org/W1445387515","https://openalex.org/W1520914943","https://openalex.org/W1986678144","https://openalex.org/W2060691344","https://openalex.org/W2061603028","https://openalex.org/W2090837542","https://openalex.org/W2119821739","https://openalex.org/W2134750673","https://openalex.org/W2145827727","https://openalex.org/W2238470380","https://openalex.org/W2290913099","https://openalex.org/W2575585029","https://openalex.org/W2605035112","https://openalex.org/W2615349154","https://openalex.org/W2748561986","https://openalex.org/W2755914852","https://openalex.org/W2773031569","https://openalex.org/W2792106437","https://openalex.org/W2797759721","https://openalex.org/W2806521799","https://openalex.org/W2806879796","https://openalex.org/W2808135558","https://openalex.org/W2886326201","https://openalex.org/W2889270945","https://openalex.org/W2898601007","https://openalex.org/W2902322559","https://openalex.org/W2933426098","https://openalex.org/W2943686508","https://openalex.org/W2963070937","https://openalex.org/W2963768411","https://openalex.org/W2964378348","https://openalex.org/W2969238072","https://openalex.org/W2970607009","https://openalex.org/W2996186646","https://openalex.org/W3000201859","https://openalex.org/W3042776162","https://openalex.org/W3081818170","https://openalex.org/W3094741512","https://openalex.org/W3096559598","https://openalex.org/W3112086075","https://openalex.org/W3115634732","https://openalex.org/W3123941558","https://openalex.org/W3127800809","https://openalex.org/W3127827332","https://openalex.org/W3139099451","https://openalex.org/W3152941721","https://openalex.org/W3155956353","https://openalex.org/W6628532452","https://openalex.org/W6754404224","https://openalex.org/W6766222326","https://openalex.org/W6766621827","https://openalex.org/W6767676013","https://openalex.org/W6781783938","https://openalex.org/W6782698827"],"related_works":["https://openalex.org/W3114076591","https://openalex.org/W2890317180","https://openalex.org/W2744433734","https://openalex.org/W2898494553","https://openalex.org/W2895433470","https://openalex.org/W3011230092","https://openalex.org/W3110645212","https://openalex.org/W3006463555","https://openalex.org/W2008128488","https://openalex.org/W186236879","https://openalex.org/W2963278782","https://openalex.org/W3174737571","https://openalex.org/W2967432172","https://openalex.org/W3002174852","https://openalex.org/W2187353989","https://openalex.org/W286781163","https://openalex.org/W2903400086","https://openalex.org/W2517394750","https://openalex.org/W3113736238","https://openalex.org/W3022234036"],"abstract_inverted_index":{"Skills,":[0],"are":[1],"essential":[2],"components":[3],"in":[4,80],"Smart":[5],"Personal":[6],"Assistants":[7],"(SPA).":[8],"The":[9],"number":[10],"of":[11,68,116,121,144,205],"skills":[12,101,110,118],"has":[13,22],"grown":[14],"rapidly,":[15],"dominated":[16],"by":[17,94],"a":[18,36,96,212],"changing":[19],"environment":[20],"that":[21,54,113,124,153],"no":[23,209],"clear":[24],"business":[25],"model.":[26],"Skills":[27],"can":[28,55,175],"access":[29],"personal":[30],"information":[31,44],"and":[32,87,111,157,162,183,186,195],"this":[33,47,60,81,142],"may":[34],"pose":[35,211],"risk":[37],"to":[38,74,98,140,191],"users.":[39],"However,":[40],"there":[41],"is":[42],"little":[43],"about":[45],"how":[46,84,173,190],"ecosystem":[48,73],"works,":[49],"let":[50],"alone":[51],"the":[52,64,69,89,117,122,199,206],"tools":[53],"facilitate":[56],"its":[57],"study.":[58],"In":[59,138],"article,":[61],"we":[62,148,202],"present":[63,149],"largest":[65],"systematic":[66],"measurement":[67],"Amazon":[70],"Alexa":[71,109],"skill":[72],"date.":[75],"We":[76,106,167],"study":[77],"developers\u2019":[78],"practices":[79],"ecosystem,":[82],"including":[83,132,172],"they":[85],"collect":[86,107],"justify":[88],"need":[90],"for":[91],"sensitive":[92],"information,":[93],"designing":[95],"methodology":[97],"identify":[99],"over-privileged":[100],"with":[102],"broken":[103,134],"privacy":[104,130,194],"policies.":[105],"199,295":[108],"uncover":[112],"around":[114],"43%":[115],"(and":[119],"50%":[120],"developers)":[123],"request":[125],"these":[126],"permissions":[127,136],"follow":[128],"bad":[129],"practices,":[131,171],"(partially)":[133],"data":[135],"traceability.":[137],"order":[139],"perform":[141],"kind":[143],"analysis":[145],"at":[146,214],"scale,":[147],"<monospace":[150],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[151],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">SkillVet</monospace>":[152],"leverages":[154],"machine":[155],"learning":[156],"natural":[158],"language":[159],"processing":[160],"techniques,":[161],"generates":[163],"high-accuracy":[164],"prediction":[165],"sets.":[166],"report":[168],"several":[169],"concerning":[170],"developers":[174],"bypass":[176],"Alexa's":[177],"permission":[178],"system":[179],"through":[180],"account":[181],"linking":[182],"conversational":[184],"skills,":[185],"offer":[187],"recommendations":[188],"on":[189],"improve":[192],"transparency,":[193],"security.":[196],"Resulting":[197],"from":[198],"responsible":[200],"disclosure":[201],"did,":[203],"13%":[204],"reported":[207],"issues":[208],"longer":[210],"threat":[213],"submission":[215],"time.":[216]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}