journal article·2023-05-23Open access

A Systematic Literature Review of Information Security in Chatbots

Jing Yang, Yen-Lin Chen, Lip Yee Por, Chin Soon Ku

Applied Sciences· Volume 13· Issue 11

Abstract

Chatbots have become increasingly popular in recent years, but they also present security risks and vulnerabilities that need to be addressed. This systematic literature review examines the existing research relating to information security in chatbots, identifying the potential threats, proposed solutions, and future directions for research. The review finds that chatbots face various security threats, including malicious input, user profiling, contextual attacks, and data breaches, and that solutions such as blockchain technology, end-to-end encryption, and organizational controls can be used to mitigate these concerns. The review also highlights the importance of maintaining user trust and addressing privacy concerns for the successful adoption and continued use of chatbots. A taxonomy developed in this review provides a useful framework for categorizing the articles and their findings. The review concludes by identifying future research directions that include developing more sophisticated authentication and authorization mechanisms, exploring the use of privacy-enhancing technologies, and improving the detection and prevention of security threats, among others. This review contributes to the growing body of literature on information security in chatbots and can guide future research and practice in this field.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: AI in Service Interactions · Blockchain Technology Applications and Security · Ethics and Social Impacts of AI

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur 50603, Malaysia

Department of Computer Science and Information Engineering, National Taipei University of Technology, Taipei 106344, Taiwan

Department of Computer Science, Universiti Tunku Abdul Rahman, Kampar 31900, Malaysia

Funding

National Science and Technology Council in Taiwan · Ministry of Education of Taiwan

References (46)

Show source-provided references
1. Designing, Developing, Evaluating, and Implementing a Smartphone-Delivered, Rule-Based Conversational Agent (DISCOVER): Development of a Conceptual Framework10.2196/38740 ↗
2. Adamopoulou, E., and Moussiades, L. (2020, January 5–7). An Overview of Chatbot Technology. Proceedings of the Artificial Intelligence Applications and Innovations 2020, Neos Marmaras, Greece.10.1007/978-3-030-49186-4_31 ↗
3. Chatbots: History, technology, and applications
4. A provably-secure authenticated key agreement protocol for remote patient monitoring IoMT10.1016/j.sysarc.2023.102831 ↗
5. A provably secure key transfer protocol for the fog-enabled Social Internet of Vehicles based on a confidential computing environment
6. Ye, W., and Li, Q. (2020, January 12–14). Chatbot Security and Privacy in the Age of Personal Assistants. Proceedings of the 2020 IEEE/ACM Symposium on Edge Computing, San Jose, CA, USA.10.1109/SEC50012.2020.00057 ↗
7. Bhuiyan, M.S.I., Razzak, A., Ferdous, M.S., Chowdhury, M.J.M., Hoque, M.A., and Tarkoma, S. (2020–1, January 29). BONIK: A Blockchain Empowered Chatbot for Financial Transactions. Proceedings of the 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications, Guangzhou, China.10.1109/TrustCom50675.2020.00143 ↗
8. Thorpe, S., and Scarlett, H. (2021, January 15–18). Towards a Cyber Aware Chatbot Service. Proceedings of the 2021 IEEE International Conference on Big Data, Orlando, FL, USA.10.1109/BigData52589.2021.9671775 ↗
9. Gondaliya, K., Butakov, S., and Zavarsky, P. (2020, January 25–27). SLA as a mechanism to manage risks related to chatbot services. Proceedings of the 2020 IEEE 6th Intl Conference on Big Data Security on Cloud, IEEE Intl Conference on High Performance and Smart Computing, and IEEE Intl Conference on Intelligent Data and Security, Baltimore, MD, USA.10.1109/BigDataSecurity-HPSC-IDS49724.2020.00050 ↗
10. Shah, M., and Panchal, M. (2022, January 20–22). Privacy Protected Modified Double Ratchet Algorithm for Secure Chatbot Application. Proceedings of the 2022 3rd International Conference on Smart Electronics and Communication, Trichy, India.10.1109/ICOSEC54921.2022.9952106 ↗
11. An Investigation Into the Sensitivity of Personal Information and Implications for Disclosure: A UK Perspective
12. Artificial intelligence in financial services: Customer chatbot advisor adoption10.35940/ijitee.A4928.119119 ↗
13. Ali, H., and Aysan, A.F. (2023). What will ChatGPT Revolutionize in Financial Industry?. Soc. Sci. Res. Netw., 4403372.10.2139/ssrn.4403372 ↗
14. El Hajal, G., Daou, R.A.Z., and Ducq, Y. (2021, January 8–10). Human Firewall: Cyber Awareness using WhatApp AI Chatbot. Proceedings of the 2021 IEEE 3rd International Multidisciplinary Conference on Engineering Technology, Beirut, Lebanon.10.1109/IMCET53404.2021.9665642 ↗
15. Pokrovskaia, N.N. (2022, January 25–27). Sociocultural and Information Security Issues in the Implementation of Neural Network Technologies in Chat-bots Design. Proceedings of the 2022 XXV International Conference on Soft Computing and Measurements, Saint Petersburg, Russia.10.1109/SCM55405.2022.9794852 ↗
16. Edu, J., Mulligan, C., Pierazzi, F., Polakis, J., Suarez-Tangil, G., and Such, J. (2022, January 25–27). Exploring the security and privacy risks of chatbots in messaging services. Proceedings of the 22nd ACM Internet Measurement Conference, Nice, France.10.1145/3517745.3561433 ↗
17. Impact of Information Security on Continuance Intention of Artificial Intelligence Assistant10.1016/j.procs.2022.08.093 ↗
18. Acceptability of artificial intelligence (AI)-led chatbot services in healthcare: A mixed-methods study
19. Waheed, N., Ikram, M., Hashmi, S.S., He, X., and Nanda, P. (2022, January 1–3). An Empirical Assessment of Security and Privacy Risks of Web-Based Chatbots. Proceedings of the International Conference on Web Information Systems Engineering, Biarritz, France.10.1007/978-3-031-20891-1_23 ↗
20. Chatbots: Security, privacy, data protection, and social aspects10.1002/cpe.6426 ↗
21. Følstad, A., Nordheim, C.B., and Bjørkli, C.A. (2018, January 24–26). What makes users trust a chatbot for customer service? An exploratory interview study. Proceedings of the International Conference on Internet Science, St. Petersburg, Russia.10.1007/978-3-030-01437-7_16 ↗
22. van der Goot, M.J., and Pilgrim, T. (2019, January 19–20). Exploring Age Differences in Motivations for and Acceptance of Chatbot Communication in a Customer Service Context. Proceedings of the International Workshop on Chatbot Research and Design, Amsterdam, The Netherlands.10.1007/978-3-030-39540-7_12 ↗
23. (2023, May 12). United Nations, Department of Economic and Social Affairs, Population Division. Available online: http://esa.un.org/wpp/.
24. (2023, May 12). GPT-4 Is OpenAI’s Most Advanced System, Producing Safer and More Useful Responses. Available online: https://openai.com/product/gpt-4.
25. Corsello, A., and Santangelo, A. (2023). May Artificial Intelligence Influence Future Pediatric Research?—The Case of ChatGPT. Children, 10.10.3390/children10040757 ↗
26. Kooli, C. (2023). Chatbots in education and research: A critical examination of ethical implications and solutions. Sustainability, 15.10.3390/su15075614 ↗
27. Giansanti, D. (2023). The Chatbots Are Invading Us: A Map Point on the Evolution, Applications, Opportunities, and Emerging Problems in the Health Domain. Life, 13.10.3390/life13051130 ↗
28. Artificial Intelligence–Based Chatbots for Promoting Health Behavioral Changes: Systematic Review10.2196/40789 ↗
29. Sallam, M. (2023). ChatGPT utility in healthcare education, research, and practice: Systematic review on the promising perspectives and valid concerns. Healthcare, 11.10.3390/healthcare11060887 ↗
30. The PRISMA 2020 statement: An updated guideline for reporting systematic reviews10.1186/s13643-021-01626-4 ↗
31. Cochrane Handbook for Systematic Reviews of Interventions10.56645/jmde.v6i14.284 ↗
32. Voege, P., Abu Sulayman, I.I.M., and Ouda, A. (2022). Smart Chatbot for User Authentication. Electronics, 11.10.3390/electronics11234016 ↗
33. Wu, T.-Y., Meng, Q., Chen, Y.-C., Kumari, S., and Chen, C.-M. (2023). Toward a secure smart-home IoT access control scheme based on home registration approach. Mathematics, 119.10.3390/math11092123 ↗
34. Rotating Behind Security: An enhanced authentication protocol for IoT-enabled devices in distributed cloud computing architecture10.1186/s13638-023-02245-4 ↗
35. Amassing the Security: An Enhanced Authentication and Key Agreement Protocol for Remote Surgery in Healthcare Environment
36. Design of an educational chatbot using artificial intelligence in radiotherapy10.3390/ai4010015 ↗
37. Addington, S. (2023). ChatGPT: Cyber Security Threats and Countermeasures. Soc. Sci. Res. Netw., 4425678.10.2139/ssrn.4425678 ↗
38. Carrillo-Torres, D., Pérez-Díaz, J.A., Cantoral-Ceballos, J.A., and Vargas-Rosales, C. (2023). A Novel Multi-Factor Authentication Algorithm Based on Image Recognition and User Established Relations. Appl. Sci., 13.10.3390/app13031374 ↗
39. Ahmad, M.O., Tripathi, G., Siddiqui, F., Alam, M.A., Ahad, M.A., Akhtar, M.M., and Casalino, G. (2023). BAuth-ZKP—A Blockchain-Based Multi-Factor Authentication Mechanism for Securing Smart Cities. Sensors, 23.10.3390/s23052757 ↗
40. Secure PIN-Entry Method Using One-Time PIN (OTP)10.1109/ACCESS.2023.3243114 ↗
41. Alexan, W., Chen, Y.L., Por, L.Y., and Gabr, M. (2023). Hyperchaotic Maps and the Single Neuron Model: A Novel Framework for Chaos-Based Image Encryption. Symmetry, 15.10.20944/preprints202304.0148.v1 ↗
42. Bartusek, J., Garg, S., Jain, A., and Policharla, G.V. (2023, January 23–27). End-to-end secure messaging with traceability only for illegal content. Proceedings of the Advances in Cryptology–EUROCRYPT 2023: 42nd Annual International Conference on the Theory and Applications of Cryptographic Techniques, Lyon, France.10.1007/978-3-031-30589-4_2 ↗
43. Marketing with ChatGPT: Navigating the Ethical Terrain of GPT-Based Chatbot Tech-nology10.3390/ai4020019 ↗
44. Torres-Castaño, A., Abt-Sacks, A., Toledo-Chávarri, A., Suarez-Herrera, J.C., Delgado-Rodríguez, J., León-Salas, B., and Serrano-Aguilar, P. (2023). Ethical, Legal, Organisational and Social Issues of Teleneurology: A Scoping Re-view. Int. J. Environ. Res. Public Health, 20.10.3390/ijerph20043694 ↗
45. Uma, S. (2023). Trends, Ap-plications, and Challenges of Chatbot Technolog, IGI Global.
46. Salahdine, F., and Kaabouch, N. (2019). Social Engineering Attacks: A Survey. Future Internet, 11.10.3390/fi11040089 ↗