{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T19:22:37Z","timestamp":1742930557271,"version":"3.40.3"},"publisher-location":"Cham","reference-count":40,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031800191"},{"type":"electronic","value":"9783031800207"}],"license":[{"start":{"date-parts":[[2024,12,15]],"date-time":"2024-12-15T00:00:00Z","timestamp":1734220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,12,15]],"date-time":"2024-12-15T00:00:00Z","timestamp":1734220800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-80020-7_4","type":"book-chapter","created":{"date-parts":[[2024,12,14]],"date-time":"2024-12-14T07:30:40Z","timestamp":1734161440000},"page":"63-84","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Securing Virtual Reality Apps Inter-process Communication"],"prefix":"10.1007","author":[{"given":"Oluwatosin","family":"Falebita","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mahmoud","family":"Abdelgawad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Evan","family":"Anspach","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Indrakshi","family":"Ray","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,12,15]]},"reference":[{"key":"4_CR1","unstructured":"Android, D.: Common intents (2024). https:\/\/developer.android.com\/guide\/components\/intents-common"},{"key":"4_CR2","unstructured":"Android, D.: Intents and intent filters (2024). https:\/\/developer.android.com\/guide\/components\/intents-filters"},{"key":"4_CR3","unstructured":"Android, D.: Let other apps start your activity (2024). https:\/\/developer.android.com\/training\/basics\/intents\/filters"},{"key":"4_CR4","unstructured":"Android, D.: Permissions (2024). https:\/\/developer.android.com\/guide\/topics\/manifest\/permission-element"},{"key":"4_CR5","unstructured":"Android\u00a0Source, C.: Interact with other apps (2023). https:\/\/cs.android.com\/android\/platform\/superproject\/+\/android14-qpr3-release:frameworks\/base\/services\/core\/java\/com\/android\/server\/firewall\/IntentFirewall.java;l=58?q=intentFire&ss=android%2Fplatform%2Fsuperproject"},{"key":"4_CR6","doi-asserted-by":"publisher","unstructured":"Arafat, A.A., Guo, Z., Awad, A.: VR-spy: a side-channel attack on virtual key-logging in VR headsets. In: 2021 IEEE Virtual Reality and 3D User Interfaces (VR), pp. 564\u2013572 (2021). https:\/\/doi.org\/10.1109\/VR50410.2021.00081","DOI":"10.1109\/VR50410.2021.00081"},{"key":"4_CR7","doi-asserted-by":"crossref","unstructured":"Backes, M., Bugiel, S., Gerling, S.: Scippa: System-centric IPC provenance on android. In: Proceedings of the 30th Annual Computer Security Applications Conference, pp. 36\u201345 (2014)","DOI":"10.1145\/2664243.2664264"},{"key":"4_CR8","unstructured":"Baiqin, W.: Binder Architecture and Core Components (2021). https:\/\/medium.com\/swlh\/binder-architecture-and-core-components-38089933bba"},{"key":"4_CR9","unstructured":"Benigni, D., Francomacaro, S.: INCITS 499-201x (revision of INCITS 499-2013), information technology -next generation access control -functional architecture (NGAC-FA) due date: The public review is from (2016). https:\/\/standards.incits.org\/higherlogic\/ws\/public\/download\/85867\/eb-2016-00808-002-Public-review-register-INCITS-499-Comments-due-2-28-2017.zip"},{"key":"4_CR10","doi-asserted-by":"crossref","unstructured":"Bezawada, B., Haefner, K., Ray, I.: Securing home IoT environments with attribute-based access control. In: Proceedings of the Third ACM Workshop on Attribute-Based Access Control, pp. 43\u201353 (2018)","DOI":"10.1145\/3180457.3180464"},{"issue":"2","key":"4_CR11","doi-asserted-by":"publisher","first-page":"550","DOI":"10.1109\/TDSC.2019.2907942","volume":"18","author":"P Casey","year":"2019","unstructured":"Casey, P., Baggili, I., Yarramreddy, A.: Immersive virtual reality attacks and the human joystick. IEEE Trans. Dependable Secure Comput. 18(2), 550\u2013562 (2019)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"4_CR12","unstructured":"Cheng, K., Tian, J.F., Kohno, T., Roesner, F.: Exploring user reactions and mental models towards perceptual manipulation attacks in mixed reality. In: Proceedings of the 32nd USENIX Security Symposium (2023)"},{"key":"4_CR13","unstructured":"De\u00a0Giorgi, M.: System calls monitoring in android: an approach to detect debuggers, anomalies and privacy issues (2023)"},{"key":"4_CR14","unstructured":"Dietz, M., Shekhar, S., Pisetsky, Y., Shu, A., Wallach, D.S.: Quire: lightweight provenance for smart phone operating systems. In: USENIX Security Symposium, vol.\u00a031, p.\u00a03. San Francisco, CA (2011)"},{"key":"4_CR15","unstructured":"Falebita, O.S.: Secure web-based student information management system. arXiv preprint arXiv:2211.00072 (2022)"},{"key":"4_CR16","doi-asserted-by":"crossref","unstructured":"Ferraiolo, D., Chandramouli, R., Kuhn, R., Hu, V.: Extensible access control markup language (XACML) and next generation access control (NGAC). In: Proceedings of the 2016 ACM International Workshop on Attribute Based Access Control, pp. 13\u201324 (2016)","DOI":"10.1145\/2875491.2875496"},{"key":"4_CR17","doi-asserted-by":"publisher","unstructured":"Ferraiolo, D., Gavrila, S., Jansen, W.: Archived nist technical series publication archived publication series\/number: Title: Publication date(s): Withdrawal date: Superseding publication(s) (2014). https:\/\/doi.org\/10.6028\/NIST.IR.7987r1","DOI":"10.6028\/NIST.IR.7987r1"},{"key":"4_CR18","doi-asserted-by":"crossref","unstructured":"George, C., Khamis, M., Buschek, D., Hussmann, H.: Investigating the third dimension for authentication in immersive virtual reality and in the real world. In: 2019 IEEE Conference on Virtual Reality and 3D User Interfaces (VR), pp. 277\u2013285. IEEE (2019)","DOI":"10.1109\/VR.2019.8797862"},{"key":"4_CR19","doi-asserted-by":"crossref","unstructured":"George, C., et al.: Seamless and secure VR: adapting and evaluating established authentication systems for virtual reality. In: Proceedings of the CHI Conference on Human Factors in Computing Systems. NDSS (2017)","DOI":"10.14722\/usec.2017.23028"},{"key":"4_CR20","unstructured":"Google, D.: Application Sandbox (2024). https:\/\/source.android.com\/docs\/security\/app-sandbox#:~:text=Because%20the%20Application%20Sandbox%20is,run%20within%20the%20Application%20Sandbox"},{"key":"4_CR21","unstructured":"Institute, A.N.S.: Information technology - next generation access control (NGAC). Information technology, ANSI, New York, NY (2020). Accessed 2023"},{"key":"4_CR22","series-title":"Advances in Intelligent Systems and Computing","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1007\/978-3-319-23258-4_2","volume-title":"Intelligent Systems Technologies and Applications","author":"Y Kaladharan","year":"2016","unstructured":"Kaladharan, Y., Mateti, P., Jevitha, K.P.: An encryption technique to thwart android binder exploits. In: Berretti, S., Thampi, S.M., Dasgupta, S. (eds.) Intelligent Systems Technologies and Applications. AISC, vol. 385, pp. 13\u201321. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-23258-4_2"},{"issue":"2","key":"4_CR23","doi-asserted-by":"publisher","first-page":"93","DOI":"10.5383\/JUSPN.16.02.006","volume":"16","author":"N Kashmar","year":"2022","unstructured":"Kashmar, N., Adda, M., Ibrahim, H.: Access control metamodels: review, critical analysis, and research issues. J. Ubiquitous Syst. Pervasive Netw. 16(2), 93\u2013102 (2022)","journal-title":"J. Ubiquitous Syst. Pervasive Netw."},{"key":"4_CR24","unstructured":"Klepp, T.: Cruel intentions: enhancing androids intent firewall. Ph.D. thesis, Technische Universit\u00e4t Wien (2020)"},{"key":"4_CR25","series-title":"Texts and Monographs in Computer Science","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1007\/978-1-4612-4400-4_4","volume-title":"The Design and Analysis of Algorithms","author":"DC Kozen","year":"1992","unstructured":"Kozen, D.C., Kozen, D.C.: Depth-first and breadth-first search. In: The Design and Analysis of Algorithms. Texts and Monographs in Computer Science, pp. 19\u201324. Springer, New York (1992). https:\/\/doi.org\/10.1007\/978-1-4612-4400-4_4"},{"key":"4_CR26","doi-asserted-by":"crossref","unstructured":"Kraunelis, J., Fu, X., Yu, W., Zhao, W.: A framework for detecting and countering android UI attacks via inspection of IPC traffic. In: 2018 IEEE International Conference on Communications (ICC), pp.\u00a01\u20136. IEEE (2018)","DOI":"10.1109\/ICC.2018.8422187"},{"key":"4_CR27","doi-asserted-by":"crossref","unstructured":"Lawal, S., Krishnan, R.: Utilizing policy machine for attribute-based access control in permissioned blockchain. In: 2021 IEEE International Conference on Omni-Layer Intelligent Systems (COINS), pp.\u00a01\u20136. IEEE (2021)","DOI":"10.1109\/COINS51742.2021.9524248"},{"key":"4_CR28","doi-asserted-by":"crossref","unstructured":"Lebeck, K., Ruth, K., Kohno, T., Roesner, F.: Securing augmented reality output. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 320\u2013337. IEEE (2017)","DOI":"10.1109\/SP.2017.13"},{"key":"4_CR29","doi-asserted-by":"crossref","unstructured":"Luo, S., Nguyen, A., Song, C., Lin, F., Xu, W., Yan, Z.: Oculock: exploring human visual system for authentication in virtual reality head-mounted display. In: 2020 Network and Distributed System Security Symposium (NDSS) (2020)","DOI":"10.14722\/ndss.2020.24079"},{"issue":"5","key":"4_CR30","doi-asserted-by":"publisher","first-page":"973","DOI":"10.1007\/s10207-022-00592-9","volume":"21","author":"C Lyvas","year":"2022","unstructured":"Lyvas, C., Lambrinoudakis, C., Geneiatakis, D.: Intentauth: securing android\u2019s intent-based inter-process communication. Int. J. Inf. Secur. 21(5), 973\u2013982 (2022)","journal-title":"Int. J. Inf. Secur."},{"key":"4_CR31","doi-asserted-by":"crossref","unstructured":"Mathis, F., Williamson, J., Vaniea, K., Khamis, M.: Rubikauth: fast and secure authentication in virtual reality. In: Extended Abstracts of the 2020 CHI Conference on Human Factors in Computing Systems, pp.\u00a01\u20139 (2020)","DOI":"10.1145\/3334480.3382827"},{"key":"4_CR32","unstructured":"Odeleye, B., Loukas, G., Heartfield, R., Spyridonis, F.: Detecting framerate-oriented cyber attacks on user experience in virtual reality. In: VR4Sec: 1st International Workshop on Security for XR and XR for Security: Proceedings, pp.\u00a01\u20135. Vancouver, B.C., Canada (virtual) (2021)"},{"key":"4_CR33","first-page":"301658","volume":"47","author":"E Raymer","year":"2023","unstructured":"Raymer, E., MacDermott, \u00c1., Akinbi, A.: Virtual reality forensics: Forensic analysis of meta quest 2. Forensic Sci. Int. Digital Invest. 47, 301658 (2023)","journal-title":"Forensic Sci. Int. Digital Invest."},{"key":"4_CR34","unstructured":"Smalley, S., Craig, R.: Security enhanced (se) android: bringing flexible mac to android. In: Ndss, vol.\u00a0310, pp. 20\u201338 (2013)"},{"key":"4_CR35","doi-asserted-by":"crossref","unstructured":"Tseng, W.J., et al.: The dark side of perceptual manipulations in virtual reality. In: Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems, pp. 1\u201315 (2022)","DOI":"10.1145\/3491102.3517728"},{"key":"4_CR36","doi-asserted-by":"publisher","first-page":"102923","DOI":"10.1016\/j.cose.2022.102923","volume":"127","author":"M Vondr\u00e1\u010dek","year":"2023","unstructured":"Vondr\u00e1\u010dek, M., Baggili, I., Casey, P., Mekni, M.: Rise of the metaverse\u2019s immersive virtual reality malware and the man-in-the-room attack & defenses. Comput. Secur. 127, 102923 (2023)","journal-title":"Comput. Secur."},{"key":"4_CR37","doi-asserted-by":"crossref","unstructured":"Wei, Y.G., Lu, Y., Hu, X.Y., Sun, B.: Research and application of access control technique in 3D virtual reality system opensim. In: 2013 Sixth International Symposium on Computational Intelligence and Design, vol.\u00a02, pp. 65\u201368. IEEE (2013)","DOI":"10.1109\/ISCID.2013.130"},{"key":"4_CR38","doi-asserted-by":"publisher","unstructured":"Wu, D., Cheng, Y., Gao, D., Li, Y., Deng, R.H.: Sclib: a practical and lightweight defense against component hijacking in android applications. In: Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy (CODASPY 2018), pp. 299\u2013306. ACM, Tempe, AZ, USA (2018). https:\/\/doi.org\/10.1145\/3176258.3176336","DOI":"10.1145\/3176258.3176336"},{"key":"4_CR39","unstructured":"Yang, Z., Li, C.Y., Bhalla, A., Zhao, B.Y., Zheng, H.: Inception attacks: immersive hijacking in virtual reality systems. arXiv preprint arXiv:2403.05721 (2024)"},{"key":"4_CR40","doi-asserted-by":"crossref","unstructured":"Yarramreddy, A., Gromkowski, P., Baggili, I.: Forensic analysis of immersive virtual reality social applications. In: A Primary Accout, 2018 IEEE Security and Privacy Workshops, pp. 186\u2013196. IEEE. San Francisco (2018)","DOI":"10.1109\/SPW.2018.00034"}],"container-title":["Lecture Notes in Computer Science","Information Systems Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-80020-7_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,14]],"date-time":"2024-12-14T08:04:20Z","timestamp":1734163460000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-80020-7_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,15]]},"ISBN":["9783031800191","9783031800207"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-80020-7_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024,12,15]]},"assertion":[{"value":"15 December 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICISS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Systems Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Jaipur","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 December 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 December 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iciss2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iciss.isrdc.in","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}