Security of runtime extensible virtual environments

Salles, Ernesto J.; Michael, James Bret; Capps, Michael; McGregor, Don; Kapolka, Andrzej

doi:10.1145/571878.571894

Cited by 6 publications

(2 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Extensible run-time is generally not a well-researched topic outside the Web and server centre domain (e.g., Docker https://www. docker.com/), see Sallés et al (2002).…”

Section: Cmr Properties Relating To Securitymentioning

confidence: 99%

Cyber Security Threats and Challenges in Collaborative Mixed-Reality

Happa

Glencross²,

Steed

2019

Front. ICT

View full text Add to dashboard Cite

Collaborative Mixed-Reality (CMR) applications are gaining interest in a wide range of areas including games, social interaction, design and health-care. To date, the vast majority of published work has focused on display technology advancements, software, collaboration architectures and applications. However, the potential security concerns that affect collaborative platforms have received limited research attention. In this position paper, we investigate the challenges posed by cyber-security threats to CMR systems. We focus on how typical network architectures facilitating CMR and how their vulnerabilities can be exploited by attackers, and discuss the degree of potential social, monetary impacts, psychological and other harms that may result from such exploits. The main purpose of this paper is to provoke a discussion on CMR security concerns. We highlight insights from a cyber-security threat modelling perspective and also propose potential directions for research and development toward better mitigation strategies. We present a simple, systematic approach to understanding a CMR attack surface through an abstraction-based reasoning framework to identify potential attack vectors. Using this framework, security analysts, engineers, designers and users alike (stakeholders) can identify potential Indicators of Exposures (IoE) and Indicators of Compromise (IoC). Our framework allows stakeholders to reduce their CMR attack surface as well understand how Intrusion Detection System (IDS) approaches can be adopted for CMR systems. To demonstrate the validity to our framework, we illustrate several CMR attack surfaces through a set of use-cases. Finally, we also present a discussion on future directions this line of research should take.

show abstract

“…Extensible run-time is generally not a well-researched topic outside the Web and server centre domain (e.g., Docker https://www. docker.com/), see Sallés et al (2002).…”

Section: Cmr Properties Relating To Securitymentioning

confidence: 99%

Cyber Security Threats and Challenges in Collaborative Mixed-Reality

Happa

Glencross²,

Steed

2019

Front. ICT

View full text Add to dashboard Cite

show abstract

“…In either case, the process raises the question of whether a person can trust the source of the new piece of software to be integrated into the current system, and this implies mechanisms to ensure trust and guarantee authentication. A preliminary design criteria [224] has been discussed to be integrated in the NPSNET-V system, but none other has been addressed in the field of VEs.…”

Section: System Securitymentioning

confidence: 99%

Analysis Domain Model for Shared Virtual Environments

Oliveira¹,

Jordan²,

Pereira³

et al. 2009

IJVR

View full text Add to dashboard Cite

The field of shared virtual environments, which also encompasses online games and social 3D environments, has a system landscape consisting of multiple solutions that share great functional overlap. However, there is little system interoperability between the different solutions. A shared virtual environment has an associated problem domain that is highly complex raising difficult challenges to the development process, starting with the architectural design of the underlying system. This paper has two main contributions. The first contribution is a broad domain analysis of shared virtual environments, which enables developers to have a better understanding of the whole rather than the part(s). The second contribution is a reference domain model for discussing and describing solutions - the Analysis Domain Model.

show abstract

Vulnerabilities and Digital Violations in Software Products: Logistic Regression Analysis

Anjum

Mohd

2020

2020 International Conference on Cyber Warfare and Security (ICCWS)

View full text Add to dashboard Cite

Security of runtime extensible virtual environments

Cited by 6 publications

References 25 publications

Cyber Security Threats and Challenges in Collaborative Mixed-Reality

Cyber Security Threats and Challenges in Collaborative Mixed-Reality

Analysis Domain Model for Shared Virtual Environments

Vulnerabilities and Digital Violations in Software Products: Logistic Regression Analysis

Contact Info

Product

Resources

About