IEICE TRANSACTIONS on Information
Spy in Your Eye: Spycam Attack via Open-Sided Mobile VR Device
Summary :
Privacy violations via spy cameras are becoming increasingly serious. With the recent advent of various smart home IoT devices, such as smart TVs and robot vacuum cleaners, spycam attacks that steal users' information are being carried out in more unpredictable ways. In this paper, we introduce a new spycam attack on a mobile WebVR environment. It is performed by a web attacker who maliciously accesses the back-facing cameras of victims' mobile devices while they are browsing the attacker's WebVR site. This has the power to allow the attacker to capture victims' surroundings even at the desired field of view through sophisticated content placement in VR scenes, resulting in serious privacy breaches for mobile VR users. In this letter, we introduce a new threat facing mobile VR and show that it practically works with major browsers in a stealthy manner.
- Publication
- IEICE TRANSACTIONS on Information Vol.E105-D No.10 pp.1817-1820
- Publication Date
- 2022/10/01
- Publicized
- 2022/07/22
- Online ISSN
- 1745-1361
- DOI
- 10.1587/transinf.2022EDL8042
- Type of Manuscript
- LETTER
- Category
- Human-computer Interaction
Authors
Jiyeon LEE
Soongsil University
Kilho LEE
Soongsil University
Keyword
Latest Issue
Copyrights notice of machine-translated contents
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Cite this
Copy
Jiyeon LEE, Kilho LEE, "Spy in Your Eye: Spycam Attack via Open-Sided Mobile VR Device" in IEICE TRANSACTIONS on Information,
vol. E105-D, no. 10, pp. 1817-1820, October 2022, doi: 10.1587/transinf.2022EDL8042.
Abstract: Privacy violations via spy cameras are becoming increasingly serious. With the recent advent of various smart home IoT devices, such as smart TVs and robot vacuum cleaners, spycam attacks that steal users' information are being carried out in more unpredictable ways. In this paper, we introduce a new spycam attack on a mobile WebVR environment. It is performed by a web attacker who maliciously accesses the back-facing cameras of victims' mobile devices while they are browsing the attacker's WebVR site. This has the power to allow the attacker to capture victims' surroundings even at the desired field of view through sophisticated content placement in VR scenes, resulting in serious privacy breaches for mobile VR users. In this letter, we introduce a new threat facing mobile VR and show that it practically works with major browsers in a stealthy manner.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.2022EDL8042/_p
Copy
@ARTICLE{e105-d_10_1817,
author={Jiyeon LEE, Kilho LEE, },
journal={IEICE TRANSACTIONS on Information},
title={Spy in Your Eye: Spycam Attack via Open-Sided Mobile VR Device},
year={2022},
volume={E105-D},
number={10},
pages={1817-1820},
abstract={Privacy violations via spy cameras are becoming increasingly serious. With the recent advent of various smart home IoT devices, such as smart TVs and robot vacuum cleaners, spycam attacks that steal users' information are being carried out in more unpredictable ways. In this paper, we introduce a new spycam attack on a mobile WebVR environment. It is performed by a web attacker who maliciously accesses the back-facing cameras of victims' mobile devices while they are browsing the attacker's WebVR site. This has the power to allow the attacker to capture victims' surroundings even at the desired field of view through sophisticated content placement in VR scenes, resulting in serious privacy breaches for mobile VR users. In this letter, we introduce a new threat facing mobile VR and show that it practically works with major browsers in a stealthy manner.},
keywords={},
doi={10.1587/transinf.2022EDL8042},
ISSN={1745-1361},
month={October},}
Copy
TY - JOUR
TI - Spy in Your Eye: Spycam Attack via Open-Sided Mobile VR Device
T2 - IEICE TRANSACTIONS on Information
SP - 1817
EP - 1820
AU - Jiyeon LEE
AU - Kilho LEE
PY - 2022
DO - 10.1587/transinf.2022EDL8042
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E105-D
IS - 10
JA - IEICE TRANSACTIONS on Information
Y1 - October 2022
AB - Privacy violations via spy cameras are becoming increasingly serious. With the recent advent of various smart home IoT devices, such as smart TVs and robot vacuum cleaners, spycam attacks that steal users' information are being carried out in more unpredictable ways. In this paper, we introduce a new spycam attack on a mobile WebVR environment. It is performed by a web attacker who maliciously accesses the back-facing cameras of victims' mobile devices while they are browsing the attacker's WebVR site. This has the power to allow the attacker to capture victims' surroundings even at the desired field of view through sophisticated content placement in VR scenes, resulting in serious privacy breaches for mobile VR users. In this letter, we introduce a new threat facing mobile VR and show that it practically works with major browsers in a stealthy manner.
ER -
English
