期刊
IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING
卷 19, 期 6, 页码 4127-4144出版社
IEEE COMPUTER SOC
DOI: 10.1109/TDSC.2021.3121216
关键词
Cybersickness; Security; Privacy; Safety; Solid modeling; Servers; Virtual environments; Security and privacy; user safety; cybersickness; virtual reality learning environments; attack-fault trees; statistical model checking; risk assessment; design principles
类别
资金
- National Science Foundation [CNS-1647213, CNS-1659134, CNS-2114035]
Social Virtual Reality Learning Environments offer a new medium for flexible and immersive learning environments, requiring a focus on user safety issues caused by attacks.
Social Virtual Reality Learning Environments (VRLE) offer a new medium for flexible and immersive learning environments with geo-distributed users. Ensuring user safety in VRLE application domains such as education, flight simulations, military training is of utmost importance. Specifically, there is a need to study the impact of immersion attacks (e.g., chaperone attack, occlusion) and other types of attacks/faults (e.g., unauthorized access, network congestion) that may cause user safety issues (i.e., inducing of cybersickness). In this article, we present a novel framework to quantify the security, privacy issues triggered via immersion attacks and other types of attacks/faults. By using a real-world social VRLE viz., vSocial and creating a novel attack-fault tree model, we show that such attacks can induce undesirable levels of cybersickness. Next, we convert these attack-fault trees into stochastic timed automata (STA) representations to perform statistical model checking for a given attacker profile. Using this model checking approach, we determine the most vulnerable threat scenarios that can trigger high occurrence cases of cybersickness for VRLE users. Lastly, we show the effectiveness of our attack-fault tree modeling by incorporating suitable design principles such as hardening, diversity, redundancy and principle of least privilege to ensure user safety in a VRLE session.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据