  Advancements in semiconductor technology have reduced dimensions and cost
while improving the performance and capacity of chipsets. In addition,
advancement in the AI frameworks and libraries brings possibilities to
accommodate more AI at the resource-constrained edge of consumer IoT devices.
Sensors are nowadays an integral part of our environment which provide
continuous data streams to build intelligent applications. An example could be
a smart home scenario with multiple interconnected devices. In such smart
environments, for convenience and quick access to web-based service and
personal information such as calendars, notes, emails, reminders, banking, etc,
users link third-party skills or skills from the Amazon store to their smart
speakers. Also, in current smart home scenarios, several smart home products
such as smart security cameras, video doorbells, smart plugs, smart carbon
monoxide monitors, and smart door locks, etc. are interlinked to a modern smart
speaker via means of custom skill addition. Since smart speakers are linked to
such services and devices via the smart speaker user's account. They can be
used by anyone with physical access to the smart speaker via voice commands. If
done so, the data privacy, home security and other aspects of the user get
compromised. Recently launched, Tensor Cam's AI Camera, Toshiba's Symbio,
Facebook's Portal are camera-enabled smart speakers with AI functionalities.
Although they are camera-enabled, yet they do not have an authentication scheme
in addition to calling out the wake-word. This paper provides an overview of
cybersecurity risks faced by smart speaker users due to lack of authentication
scheme and discusses the development of a state-of-the-art camera-enabled,
microphone array-based modern Alexa smart speaker prototype to address these
risks.
