Cited by 249Privacy, Security, and Data ProtectionAI in Service InteractionsDigitalization, Law, and Regulation

Chatbots: Security, privacy, data protection, and social aspects

Open access
Hasal, Martin, Nowaková, Jana, Ahmed Saghair, Khalifa, Abdulla, Hussam, Snášel, Václav, Ogiela, Lidia·2021·Concurrency and Computation: Practice and Experience

Abstract

Summary: Chatbots are artificial communication systems becoming increasingly popular and not all their security questions are clearly solved. People use chatbots for assistance in shopping, bank communication, meal delivery, healthcare, cars, and many other actions. However, it brings an additional security risk and creates serious security challenges which have to be handled. Understanding the underlying problems requires defining the crucial steps in the techniques used to design chatbots related to security. There are many factors increasing security threats and vulnerabilities. All of them are comprehensively studied, and security practices to decrease security weaknesses are presented. Modern chatbots are no longer rule‐based models, but they employ modern natural language and machine learning techniques. Such techniques learn from a conversation, which can contain personal information. The paper discusses circumstances under which such data can be used and how chatbots treat them. Many chatbots operate on a social/messaging platform, which has their terms and conditions about data. The paper aims to present a comprehensive study of security aspects in communication with chatbots. The article could open a discussion and highlight the problems of data storage and usage obtained from the communication user—chatbot and propose some standards to protect the user.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1002/cpe.6426

Cites

52 of 52 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 13

  1. Abu Shawar BA. A Corpus Based Approach to Generalise a Chatbot System [PhD thesis]. University of Leeds, Leeds; 2005.
  2. Roller S, Dinan E, Goyal N, et al. Recipes for building an open-domain chatbot; 2020. arXiv preprint arXiv:2004.13637. · arXiv
  3. Medford RJ, Saleh SN, Sumarsono A, Perl TM, Lehmann CU. An εInfodemicε: leveraging high-volume twitter data to understand public sentiment for the COVID-19 outbreak. medRxiv; 2020.
  4. Ferrara E, Varol O, Davis C, Menczer F, Flammini A. The rise of social bots. Commun ACM. 2016;59(7):96-104.
  5. Wallace R. The elements of AIML style. Alice AI Found. 2003;139:1-86.
  6. Higashinaka R, Imamura K, Meguro T, et al. Towards an open-domain conversational system fully based on natural language processing. Paper pre- sented at: Proceedings of the COLING 2014, the 25th International Conference on Computational Linguistics: Technical Papers, ALC. Dublin, Ireland; 2014:928-939.
  7. das Graças M, Marietto B, de Aguiar RV, de Oliveira Barbosa G, Botelho WT.Artificial intelligence markup language: a brief tutorial; 2013. arXiv preprint arXiv:1307.3091. · arXiv
  8. Barga R, Fontama V, Tok WH. Cortana Analytics. New York, NY: Springer; 2015:279-283.
  9. Kohnfelder L, Garg P. The threats to our products. Microsoft Interface. Redmont, Washington: Microsoft Corporation; 1999:33.
  10. Milanov E. The RSA algorithm. RSA laboratories; 2009:1-11.
  11. Géron A. Hands-on Machine Learning with Scikit-Learn, Keras, and TensorFlow: Concepts, Tools, and Techniques to Build Intelligent Systems. Sebastopol, Canada: O'Reilly Media; 2019.
  12. Swinkels R. Eu General Data Protection Regulation Compliance [Master thesis]. 2017.
  13. Lee N, Madotto A, Fung P. Exploring social bias in chatbots using stereotype knowledge. Paper presented at: Proceedings of the 2019 Workshop on Widening NLP. Italy; 2019:177-180. winlp.org.

Cited by

Sorted by citations

Authors
Hasal, M., Nowaková, J., Ahmed Saghair, K., Abdulla, H., Snášel, V., & Ogiela, L.
Affiliations
  • VSB - Technical University of Ostrava (CZ)
  • Department of Computer Science, Faculty of Electrical Engineering and Computer Science VSB—Technical University of Ostrava Ostrava Czech Republic
  • Uniwersytet Komisji Edukacji Narodowej w Krakowie (PL)
Corresponding author
Nowaková, Jana
Venue
Concurrency and Computation: Practice and Experience
Publisher
Wiley
Published
2021-06-03
Volume
33
Issue
19
ISSN
  • 1532-0626 (ISSN-L)
  • 1532-0634
OpenAlex
W3170233936
Cited by
249
References
49
Citations by year
2026: 40 · 2025: 70 · 2024: 79 · 2023: 41 · 2022: 16 · 2021: 3
FWCI
48.16
Type
journal article
Language
en
Open access
Locations
  • Concurrency and Computation Practice and Experience (publishedVersion, cc-by-nc-nd)
  • DSpace VŠB-TUO (VŠB-TUO) (submittedVersion, cc-by-nc-nd)
Funders
  • European Regional Development Fund (CZ.02.1.01/0.0/0.0/15_003/0000466)
  • Technology Agency of the Czech Republic (TN01000024)
  • Vysoká Škola Bánská - Technická Univerzita Ostrava (SP2021/24)
Topics
  • Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
  • Physical Sciences › Computer Science › Artificial Intelligence › AI in Service Interactions
  • Social Sciences › Law › Digitalization, Law, and Regulation
Keywords
chatbots, chatbot security, privacy, data protection, personal data, security vulnerabilities, security practices, data storage, messaging platforms, terms of use

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review