Reproduce “Inception Attacks: Immersive Hijacking in Virtual Reality Systems” on OpenResearch

About this paper

Zhuolin Yang, Cathy Yuanchen Li, Arman Bhalla, Ben Y. Zhao, Haitao Zheng

Researchers at the University of Chicago developed "inception attacks," a new class of immersive hijacking techniques for Virtual Reality (VR) that allow an attacker to gain real-time control over a user's VR experience. User studies demonstrated that these attacks can deceive a high percentage of participants, including experienced VR users, into interacting with a replicated environment without suspicion.

Key insights

• VR's immersive nature creates a vulnerability where users are easily deceived by replicated environments, often attributing discrepancies to normal system glitches or performance variations.
• The lack of traditional security cues in VR, combined with user trust in established platforms, facilitates successful hijacking without raising suspicion.
• The inherent conflict between full immersion and robust security mechanisms poses a significant challenge for designing effective VR defenses.

Summary by alphaXiv.