No Escape From Reality: Security and Privacy of Augmented Reality Browsers
No Escape From Reality: Security and Privacy of Augmented Reality Browsers
复制标题
无法逃避现实：增强现实浏览器的安全和隐私
DOI：
10.1145/2736277.2741657
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Vitaly Shmatikov
中科院分区：
文献类型：
--
作者：
R. McPherson;S. Jana;Vitaly Shmatikov
增强现实（AR）浏览器是新兴类别的移动的应用，其将交互式虚拟对象添加到用户的物理世界视图。本文给出了第一个系统级的安全性和隐私属性的评估。我们首先分析AR浏览器必须支持的功能需求，以便呈现AR内容。然后，我们调查了Junaio、Layar和Wikitude浏览器的安全架构，这些浏览器目前运行在超过3000万台移动的设备上，并确定了AR浏览器特有的新类别的安全和隐私漏洞。最后，我们提供了安全实现AR功能的第一个工程指南。
Augmented reality (AR) browsers are an emerging category of mobile applications that add interactive virtual objects to the user's view of the physical world. This paper gives the first system-level evaluation of their security and privacy properties. We start by analyzing the functional requirements that AR browsers must support in order to present AR content. We then investigate the security architecture of Junaio, Layar, and Wikitude browsers, which are running today on over 30 million mobile devices, and identify new categories of security and privacy vulnerabilities unique to AR browsers. Finally, we provide the first engineering guidelines for securely implementing AR functionality.