{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T10:21:41Z","timestamp":1790936501359,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":33,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690249","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"2162-2176","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["The Big Brother's New Playground: Unmasking the Illusion of Privacy in Web Metaverses from a Malicious User's Perspective"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-5560-1041","authenticated-orcid":false,"given":"Andrea","family":"Mengascini","sequence":"first","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-4528-1998","authenticated-orcid":false,"given":"Ryan","family":"Aurelio","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-6223-8945","authenticated-orcid":false,"given":"Giancarlo","family":"Pellegrino","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/3007788.3007792"},{"key":"e_1_3_2_1_2_1","volume-title":"Reiter","author":"Bethea Darrell","year":"2011","unstructured":"Darrell Bethea, Robert A. Cochran, and Michael K. Reiter. 2011. Server-side verification of client behavior in online games. ACM Trans. Inf. Syst. Secur. (2011). https:\/\/api.semanticscholar.org\/CorpusID:188945"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.28"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2907942"},{"key":"e_1_3_2_1_5_1","volume-title":"Online IEEE VR 2020","author":"Chairs IEEE VR","year":"2020","unstructured":"IEEE VR Chairs. 2020. Online IEEE VR 2020. https:\/\/web.archive.org\/web\/20230620105759\/https:\/\/ieeevr.org\/2020\/online\/. (Accessed on 04\/27\/2024)."},{"key":"e_1_3_2_1_6_1","unstructured":"Kaiming Cheng Arkaprabha Bhattacharya Michelle Lin Jaewook Lee Aroosh Kumar Jeffery F Tian Tadayoshi Kohno and Franziska Roesner. 2024. When the User Is Inside the User Interface: An Empirical Study of UI Security Properties in Augmented Reality. (2024). https:\/\/api.semanticscholar.org\/CorpusID:263913047"},{"key":"e_1_3_2_1_7_1","volume-title":"32nd USENIX Security Symposium.","author":"Choi Minyeop","year":"2023","unstructured":"Minyeop Choi, Gihyuk Ko, and Sang Kil Cha. 2023. BotScreen: Trust Everybody, but Cut the Aimbots Yourself. In 32nd USENIX Security Symposium."},{"key":"e_1_3_2_1_8_1","volume-title":"Toward Online Verification of Client Behavior in Distributed Applications. In Network and Distributed System Security Symposium. https:\/\/api.semanticscholar.org\/CorpusID:5918500","author":"Robert","unstructured":"Robert A. Cochran and Michael K. Reiter. 2013. Toward Online Verification of Client Behavior in Distributed Applications. In Network and Distributed System Security Symposium. https:\/\/api.semanticscholar.org\/CorpusID:5918500"},{"key":"e_1_3_2_1_9_1","unstructured":"DEF CON. 2022. DEF CON Groups VR Events. https:\/\/web.archive.org\/web\/20240320214525\/https:\/\/www.dcgvr.org\/. (Accessed on 04\/27\/2024)."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00036"},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings on Privacy Enhancing Technologies (2024","author":"Garrido Gonzalo Munilla","year":"2024","unstructured":"Gonzalo Munilla Garrido, Vivek Nair, and Dawn Song. 2024. SoK: Data Privacy in Virtual Reality. Proceedings on Privacy Enhancing Technologies (2024). https:\/\/petsymposium.org\/popets\/2024\/popets-2024-0003.php"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1005847.1005878"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3491101.3519773"},{"key":"e_1_3_2_1_14_1","unstructured":"Meta. 2024. Explore worlds in Meta Horizon Worlds. https:\/\/www.meta.com\/en-gb\/help\/quest\/articles\/horizon\/explore-horizon-worlds\/explore-worlds-horizon\/. (Accessed on 07\/18\/2024)."},{"key":"e_1_3_2_1_15_1","unstructured":"VRChat Metrics. 2024. 100k Concurrent Users. https:\/\/metrics.vrchat.community\/?orgId=1&from=1708827218205&to=1708850191393. (Accessed on 04\/29\/2024)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-020--74486-y"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/VR51125.2022.00060"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Christian M\u00f6nch Gisle Grimen and Roger Midtstraum. 2006. Protecting online games against cheating. In Network and System Support for Games. https:\/\/api.semanticscholar.org\/CorpusID:3067628","DOI":"10.1145\/1230040.1230087"},{"key":"e_1_3_2_1_19_1","unstructured":"Vivek Nair Wenbo Guo Justus Mattern Rui Wang James F. O'Brien Louis Rosenberg and Dawn Song. 2023. Unique Identification of 50 000 Virtual Reality Users from Head & Hand Motion Data. (2023). http:\/\/arxiv.org\/abs\/2302.08927"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0108"},{"key":"e_1_3_2_1_21_1","volume-title":"Edith Van Dyck, and Pieter-Jan Maes","author":"Onderdijk Kelsey E","year":"2023","unstructured":"Kelsey E Onderdijk, Lies Bouckaert, Edith Van Dyck, and Pieter-Jan Maes. 2023. Concert experiences in virtual reality environments. Virtual Reality (2023)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417890"},{"key":"e_1_3_2_1_23_1","volume-title":"The social life of avatars: Presence and interaction in shared virtual environments","author":"Schroeder Ralph","unstructured":"Ralph Schroeder. 2002. Social interaction in virtual environments: Key issues, common themes, and a framework for research. In The social life of avatars: Presence and interaction in shared virtual environments. Springer, 1--18."},{"key":"e_1_3_2_1_24_1","volume-title":"Threat modeling: Designing for security","author":"Shostack Adam","unstructured":"Adam Shostack. 2014. Threat modeling: Designing for security. John Wiley & Sons."},{"key":"e_1_3_2_1_25_1","unstructured":"Similaweb. 2024. Website Traffic - Check & Analyze Any Website. https:\/\/www.similarweb.com\/. (Accessed on 04\/29\/2024)."},{"key":"e_1_3_2_1_26_1","unstructured":"Carter Slocum Yicheng Zhang Erfan Shayegani Pedram Zaree Nael Abu-Ghazaleh and Jiasi Chen. 2024. That Doesntextquoterightt Go There: Attacks on Shared State in Multi-User Augmented Reality Applications. (2024). https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/slocum"},{"key":"e_1_3_2_1_27_1","unstructured":"Three.js. 2013. https:\/\/threejs.org\/docs\/#api\/en\/. (Accessed on 04\/27\/2024)."},{"key":"e_1_3_2_1_28_1","volume-title":"OVRseen: Auditing Network Traffic and Privacy Policies in Oculus VR. In 31st USENIX Security Symposium. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/trimananda","author":"Trimananda Rahmadi","year":"2022","unstructured":"Rahmadi Trimananda, Hieu Le, Hao Cui, Janice Tran Ho, Anastasia Shuba, and Athina Markopoulou. 2022. OVRseen: Auditing Network Traffic and Privacy Policies in Oculus VR. In 31st USENIX Security Symposium. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/trimananda"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102923"},{"key":"e_1_3_2_1_30_1","unstructured":"Horizon Wolds. 2022. Meta Horizon. https:\/\/web.archive.org\/web\/20240426084415\/https:\/\/horizon.meta.com\/. (Accessed on 04\/27\/2024)."},{"key":"e_1_3_2_1_31_1","volume-title":"Watchmen: Scalable Cheat-Resistant Support for Distributed Multi-player Online Games. 2013 IEEE 33rd International Conference on Distributed Computing Systems","author":"Yahyavi Amir","year":"2013","unstructured":"Amir Yahyavi, K\u00e9vin Huguenin, Julien Gascon-Samson, J\u00f6rg Kienzle, and Bettina Kemme. 2013. Watchmen: Scalable Cheat-Resistant Support for Distributed Multi-player Online Games. 2013 IEEE 33rd International Conference on Distributed Computing Systems (2013). https:\/\/api.semanticscholar.org\/CorpusID:11156747"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1103599.1103606"},{"key":"e_1_3_2_1_33_1","volume-title":"International Joint Conference on Neural Networks","author":"Yu Su-Yang","year":"2012","unstructured":"Su-Yang Yu, Nils Y. Hammerla, Jeff Yan, and P\u00e9ter Andr\u00e1s. 2012. A statistical aimbot detection method for online FPS games. International Joint Conference on Neural Networks (2012). https:\/\/api.semanticscholar.org\/CorpusID:14154557"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690249","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690249","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:17:09Z","timestamp":1755843429000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690249"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":33,"alternative-id":["10.1145\/3658644.3690249","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690249","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}