SurroundWeb: Mitigating Privacy Concerns in a 3D Web Browser
SurroundWeb: Mitigating Privacy Concerns in a 3D Web Browser
复制标题
DOI：
10.1109/sp.2015.33
复制
发表时间：
2015-05
期刊：
影响因子：
--
通讯作者：
J. Vilk;D. Molnar;B. Livshits;E. Ofek;C. Rossbach;Alexander Moshchuk;Helen J. Wang;Ran Gal
中科院分区：
文献类型：
--
作者：
J. Vilk;D. Molnar;B. Livshits;E. Ofek;C. Rossbach;Alexander Moshchuk;Helen J. Wang;Ran Gal
混合数字和现实世界对象的沉浸式体验正在成为现实，但由于它们需要实时传感器输入，因此引发了严重的隐私问题。这些体验已经通过Kinect出现在智能手机和游戏机上，最终将出现在网络平台上。然而，浏览器不暴露呈现沉浸式体验所需的显示界面。以前的安全研究集中在控制应用程序访问传感器输入单独，并不处理显示接口。最近的人机交互研究已经探索了各种高级别的渲染界面，用于沉浸式体验，但这些界面会向应用程序显示敏感数据。将沉浸式体验带到网络上需要一个高级界面，以减轻隐私问题。本文介绍了第一个3D Web浏览器Surround Web，它提供了将Web内容渲染到房间中的新功能，同时解决了许多固有的隐私挑战。遵循最小特权原则，我们提出了沉浸式渲染的三个抽象：1）房间骨架让应用响应于房间中的可呈现表面的物理尺寸和位置来放置内容，2）检测沙箱让应用声明性地将内容放置在房间中的所识别的对象附近，而不揭示对象是否存在，以及3）卫星屏幕允许应用程序在注册了Surround Web的设备上显示内容。通过用户调查，我们验证，这些抽象限制透露的信息量在一个可接受的程度。此外，我们表明，广泛的沉浸式体验可以实现可接受的性能。
Immersive experiences that mix digital and real-world objects are becoming reality, but they raise serious privacy concerns as they require real-time sensor input. These experiences are already present on smartphones and game consoles via Kinect, and will eventually emerge on the web platform. However, browsers do not expose the display interfaces needed to render immersive experiences. Previous security research focuses on controlling application access to sensor input alone, and do not deal with display interfaces. Recent research in human computer interactions has explored a variety of high-level rendering interfaces for immersive experiences, but these interfaces reveal sensitive data to the application. Bringing immersive experiences to the web requires a high-level interface that mitigates privacy concerns. This paper presents Surround Web, the first 3D web browser, which provides the novel functionality of rendering web content onto a room while tackling many of the inherent privacy challenges. Following the principle of least privilege, we propose three abstractions for immersive rendering: 1) the room skeleton lets applications place content in response to the physical dimensions and locations of render able surfaces in a room, 2) the detection sandbox lets applications declaratively place content near recognized objects in the room without revealing if the object is present, and 3) satellite screens let applications display content across devices registered with Surround Web. Through user surveys, we validate that these abstractions limit the amount of revealed information to an acceptable degree. In addition, we show that a wide range of immersive experiences can be implemented with acceptable performance.