A systematic threat analysis and defense strategies for the metaverse and extended reality systems

Qamar, Sara; Anwar, Zahid; Afzal, Mehreen

doi:10.1016/j.cose.2023.103127

Cited by 72 publications

(19 citation statements)

References 43 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although the exploration and development of metaverse is still in the infancy phase, some works on metaverse [8,9] have already been proposed. Additionally, several works [10][11][12][13][14] have discussed security and privacy issues in the metaverse. As relevant technologies are deeply explored, research on the metaverse has involved multiple areas.…”

Section: Related Workmentioning

confidence: 99%

Chaotic Map-Based Authentication and Key Agreement Protocol with Low-Latency for Metasystem

Wang,

Liu

2024

CMC

View full text Add to dashboard Cite

With the rapid advancement in exploring perceptual interactions and digital twins, metaverse technology has emerged to transcend the constraints of space-time and reality, facilitating remote AI-based collaboration. In this dynamic metasystem environment, frequent information exchanges necessitate robust security measures, with Authentication and Key Agreement (AKA) serving as the primary line of defense to ensure communication security. However, traditional AKA protocols fall short in meeting the low-latency requirements essential for synchronous interactions within the metaverse. To address this challenge and enable nearly latency-free interactions, a novel lowlatency AKA protocol based on chaotic maps is proposed. This protocol not only ensures mutual authentication of entities within the metasystem but also generates secure session keys. The security of these session keys is rigorously validated through formal proofs, formal verification, and informal proofs. When confronted with the Dolev-Yao (DY) threat model, the session keys are formally demonstrated to be secure under the Real-or-Random (ROR) model. The proposed protocol is further validated through simulations conducted using VMware workstation compiled in HLPSL language and C language. The simulation results affirm the protocol's effectiveness in resisting well-known attacks while achieving the desired low latency for optimal metaverse interactions.

show abstract

Section: Related Workmentioning

confidence: 99%

Chaotic Map-Based Authentication and Key Agreement Protocol with Low-Latency for Metasystem

Wang,

Liu

2024

CMC

View full text Add to dashboard Cite

show abstract

“…The management of risk within information systems is a pivotal process that necessitates the identification, quantification, assessment, and mitigation of risks associated with the deployment of such systems within an organization [14]. An analysis is undertaken with the aim of pinpointing potential threats [15] and identifying inherent vulnerabilities in the existing information systems. Subsequently, it is the goal to devise suitable preventive or mitigation measures [16,17].…”

Section: Risk Management Analysismentioning

confidence: 99%

Risk Management Analysis of SMK Telkom Makassar's Integrated Academic Information System in Compliance with ISO 31000 Standards

Sahibu,

Sakti,

Iskandar

2024

ISI

View full text Add to dashboard Cite

This investigation seeks to analyze the security risks associated with the Integrated Academic Information System (iGracias) application at SMK Telkom Makassar, using the ISO 31000 standards as a benchmark. The study employs the ISO 31000:2018 Information Technology Risk Management methodology, encompassing stages of risk identification, risk analysis, risk evaluation, and risk treatment. This methodology enables the researchers to ascertain that risks have been accurately identified, thoroughly analyzed, and appropriately mitigated, minimizing their potential impact on the organization. The findings reveal security issues in the iGracias application at SMK Telkom Makassar, identified through scanning with NMAP Kali Linux, which exposed several open ports, including port 21/tcp, port 22/tcp, and port 25/tcp. Consequently, these open ports present potential opportunities for unauthorized access and cyber-attacks. Moreover, the Mobile Security Framework (MobSF) test results yielded a Common Vulnerability Scoring System (CVSS) of 6.1, indicating a medium security level for the iGracias application in the Android environment. User responses revealed process risk at 84%, system security risk at 62%, and incidental risk at 57%. The outcomes of this investigation may serve as a guide in formulating and implementing strategies to uphold the security and quality of the applications in use.

show abstract

“…The development and research of metaverse involve many areas, and some papers have outlined the key technologies related to metaverse 1,4 , such as extended reality 5 , blockchain [6][7][8] , artificial intelligence 9,10 , and 5G technology 11 . Several papers have introduced research on metaverse security and privacy [12][13][14][15][16] . Wang et al have introduced the security vulnerability and countermeasures of metaverse from several aspects such as authentication and authorization, access control, data management, privacy threats, network, society, and governance 17 .…”

Section: Related Workmentioning

confidence: 99%

Security vulnerability analysis of metaverse in cyberspace

Wei,

Lin,

Yang

et al. 2023

Fifth International Conference on Artificial Intelligence and Computer Science (AICS 2023)

View full text Add to dashboard Cite

With the development of the metaverse, its position in cyberspace is becoming increasingly important. Due to its complexity and openness, the metaverse also faces many security threats and vulnerabilities. This paper focuses on the security vulnerability of the metaverse in cyberspace. First, the basic concepts and characteristics of the metaverse are introduced. Then, the architecture of the metaverse is hierarchically introduced, and the security vulnerability of the metaverse in cyberspace is analyzed. Furthermore, the security countermeasures of the metaverse in cyberspace are introduced. Finally, the importance of the metaverse is summarized and the corresponding security countermeasures in the future are discussed. This paper explores the security vulnerability of the metaverse in cyberspace from several technical perspectives and provides strong theoretical support and practical guidance for the development of the metaverse.

show abstract

A systematic threat analysis and defense strategies for the metaverse and extended reality systems

Cited by 72 publications

References 43 publications

Chaotic Map-Based Authentication and Key Agreement Protocol with Low-Latency for Metasystem

Chaotic Map-Based Authentication and Key Agreement Protocol with Low-Latency for Metasystem

Risk Management Analysis of SMK Telkom Makassar's Integrated Academic Information System in Compliance with ISO 31000 Standards

Security vulnerability analysis of metaverse in cyberspace

Contact Info

Product

Resources

About