A Threat Analysis for Virtual Reality Media

Metadata

Publisher: SMPTE — White Plains, NY, USA
Doc Type: Journal Article
Content Type: Original Research
Abbreviated Title: SMPTE Mot. Imag. J
Volume: 128, No. 7, pp. 38–44
Abstract: This research paper proposes an initial threat analysis of virtual reality (VR) for the media industry. It focuses on the use of VR for media consumption or media-related applications. Pure gaming is not within its scope. Nevertheless, this study tackles casual gaming applications related to movies or TV shows. After introducing a taxonomy of VR (360 VR, Theatrical VR, and Interactive VR) in the media industry, we determine all of the assets that may need protection. Indeed, many more assets than the media content may require adequate protection. We describe some specific threats using the Attack-Defense Tree (ADT) methodology. This threat analysis discloses a new attack coined Denial of Experience to induce cybersickness. How should the industry prepare? We propose some priorities in the definition of a proper defense. As an example, the first recommendation is to build a risk aversion table. Some defenses may benefit from a coordinated, standardized approach.
Publication Date: 2019-08-01
DOI: 10.5594/JMI.2019.2918036
ISSN: Print: 1545-0279 | Electronic: 2160-2492
Link: https://doi.org/10.5594/JMI.2019.2918036
Author(s): Eric Diehl
Keyword(s): Security, Threat Analysis, Virtual Reality
Copyright: © 2019 SMPTE

Bibliographic Reference(s)

K. Murphy, “Feeling Woozy? It May Be Cyber Sickness,” Well (blog), Nov. 2015. [Online]. Available: https://well.blogs.nytimes.com/2015/11/14/feeling-woozy-it-may-be-cyber-sickness/ EXTERNAL
E. Schwartzel, “Hollywood’s Other Piracy Problem: 3-D Printers,” Wall Street J., Jul. 2015. [Online]. Available: https://www.wsj.com/articles/hollywoods-other-piracy-problem-3-d-printers-1437420799 EXTERNAL
E. Diehl, Securing Digital Video, Springer-Verlag: Berlin Heidelberg, 2012. EXTERNAL
Y. Son, H. Shin, D. Kim, Y. Park, J. Noh, K. Choi, J. Choi, and Y. Kim, “Rocking Drones with Intentional Sound Noise on Gyroscopic Sensors,” Proc. 24th USENIX Conference on Security Symposium, pp. 881–896, Berkeley, CA, 2015. [Online]. Available: http://dl.acm.org/citation.cfm?id=2831143.2831199 EXTERNAL
J. J. LaViola, Jr., “A Discussion of Cybersickness in Virtual Environments,” SIGCHI Bull., 32(1):47–56, 2000. EXTERNAL
S. Tzu. The Art of War, Dover Publications, Inc., 2002. EXTERNAL
MPAA Content Security Program, “Content Security Best Practices: Common Guidelines V3.0,” 2015. [Online]. Available: http://www.mpaa.org/wp-content/uploads/2015/11/MPAA-Best-Practices-Common-Guidelines_V3_0_2015_04_02_FINAL-r7.pdf EXTERNAL
TPN, “Trusted Partner Network.” [Online]. Available: https://ttpn.org/ EXTERNAL
E. Diehl, Ten Laws for Security, 1st ed., Springer: New York, NY, 2016. EXTERNAL
B. Kordy, S. Mauw, S. Radomirović, and P. Schweitzer, “Foundations of Attack–Defense Trees,” in Formal Aspects of Security and Trust, P. Degano, S. Etalle, and J. Guttman, eds., Lecture Notes in Computer Science, Springer: Berlin Heidelberg, pp. 80–95, 2011. EXTERNAL
B. Schneier, “Attack Trees,” Dr. Dobb’s J., Dec. 1999. EXTERNAL
P. Milgram and F. Kishino, “A Taxonomy of Mixed Reality Visual Displays,” IEICE Trans. Inf. Syst., 77(12):1321–1329, 1994. EXTERNAL
University of Luxembourg, “ADTool.” Accessed: 31 May 2017. [Online]. Available: http://satoss.uni.lu/members/piotr/adtool/ EXTERNAL
International Standards Organization/International Electrotechnical Commission (ISO/IEC) Standard 27002:2005, “Information Technology—Security Techniques—Code of Practice for Information Security Management,” 2005. EXTERNAL
L. Rebenitsch and C. Owen, “Review on Cybersickness in Applications and Visual Displays.” Virtual Real., 20(2):101–125, 2016. EXTERNAL
T. Reiners, S. Wriedt, and A. Rea, “Property-Based Object Management and Security,” in Security in Virtual Worlds, 3D Webs, and Immersive Environments: Models for Development, Interaction, and Management, pp. 170–207, 2010. [Online]. Available: http://www.igi-global.com/chapter/property-based-object-management-security/49522 EXTERNAL
ENISA, “Virtual Worlds, Real Money,” 2008. [Online]. Available: http://www.enisa.europa.eu/doc/pdf/deliverables/enisa_pp_security_privacy_virtualworlds.pdf EXTERNAL
M. Muhanna, “Virtual Reality and the CAVE: Taxonomy, Interaction Challenges and Research Directions,” J. King Saud Univ., 27(3): 344–361, 2015. EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/10.5594-JMI.2019.2918036.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

Eric Diehl; A Threat Analysis for Virtual Reality Media, SMPTE Motion Imaging Journal ( Volume: 128, Issue: 7, August 2019); SMPTE, 2019. Available at https://doi.org/10.5594/JMI.2019.2918036

Snippet:

Eric Diehl; A Threat Analysis for Virtual Reality Media, SMPTE Motion Imaging Journal ( Volume: 128, Issue: 7, August 2019); SMPTE, 2019. Available at https://doi.org/10.5594/JMI.2019.2918036

HTML (ISO 690 compliant)

Preview:

Eric Diehl; A Threat Analysis for Virtual Reality Media, SMPTE Motion Imaging Journal ( Volume: 128, Issue: 7, August 2019); SMPTE, 2019. Available at https://doi.org/10.5594/JMI.2019.2918036

Snippet:

<span class="citation">Eric Diehl; <cite>A Threat Analysis for Virtual Reality Media</cite>, SMPTE Motion Imaging Journal ( Volume: 128, Issue: 7, August 2019); SMPTE, 2019. Available at <a href="https://doi.org/10.5594/JMI.2019.2918036" target="_blank" rel="noopener">https://doi.org/10.5594/JMI.2019.2918036</a></span>

SMPTE's HTML Pub

Preview:

Eric Diehl; A Threat Analysis for Virtual Reality Media, SMPTE Motion Imaging Journal ( Volume: 128, Issue: 7, August 2019); SMPTE, 2019
doi: 10.5594/JMI.2019.2918036
url: https://doi.org/10.5594/JMI.2019.2918036

Snippet:

<li>
Eric Diehl; <cite id="bib-10-5594-jmi-2019-2918036">A Threat Analysis for Virtual Reality Media</cite>, SMPTE Motion Imaging Journal ( Volume: 128, Issue: 7, August 2019); SMPTE, 2019
<span class="doi">10.5594/JMI.2019.2918036</span>
</li>