Magazine menu Close Magazine menu

VR

Latest stories

Person wearing augmented reality (AR) glasses reaches out and touches a virtual version of themselves.

Does virtual and augmented reality mean augmented cybercrime too?

  • min read
    • Not so long ago, augmented reality (AR) and virtual reality (VR) were the stuff of science fiction. Now they've become more than just niche experimental technologies. They're rapidly entering the mainstream, particularly in the consumer world of interactive media. But it's not just things like video games that are being transformed by the rise of VR platforms – there are some promising business cases for AR and VR too. In fact, some experts estimate that they will become indispensable technologies in the business world by as early as 2025. What is augmented and virtual reality? Although augmented and virtual reality are closely related, they're not the same thing. AR 'augments' the real world around the user by adding digital elements to the real-world view. Perhaps the most familiar example is the mobile game Pokémon Go, as well as less successful products like the infamous Google Glass. VR, by contrast, provides a far more immersive experience, since it relies on shutting out the physical world entirely. Popular VR devices include gaming platforms like HTC Vive and Oculus Rift, as well as lower-tech and more affordable experiences like those offered by Google Cardboard. Another term you'll encounter is mixed reality (MR), which refers to experiences that combine elements of both VR and AR. One of the best-known examples is Microsoft HoloLens, an MR platform designed specifically for business applications. What are the business applications of augmented and virtual reality? Rapid prototyping One of the most promising applications is product prototyping, a process which involves creating a complete digital model of a product (or, a so-called digital twin) and merging it with a VR experience. This allows for extensive testing and ideation without the high costs of developing multiple physical prototypes. Employee training Another popular business application, and one that's already entering mainstream use, is employee training. By applying VR or AR to training programs, it's possible to build a safe and highly interactive simulated environment with real-time feedback. Similarly, AR and VR can help improve workplace safety, especially in hazardous environments, be they workshop floors or nuclear reactors. AR can also help workers assemble, operate and maintain complex machines by providing real-time information overlaid onto their headsets. These are just a few of the exciting applications of augmented and virtual reality. And, though they might still sound like science fiction to the layperson, they're actually not. Companies like Ford, Airbus and Sotheby's are already using them. The wearable camera problem Augmented reality headsets depend on their abilities to understand the local environment, which means cameras are often essential components and they can pose a security risk. Ever since the first Google Glass prototype was released to much fanfare back in 2013 (only to fail miserably by 2015), there have been growing concerns around privacy and security. The launch of Google Glass even gave rise to the colorful term 'glasshole', which refers to those people who behaved inappropriately while using the device (such as by spying on others and taking photos without their knowledge). But edgy names aside, this has serious implications in fields such as healthcare where organizations are subject to strict compliance regulations like HIPAA to protect patient privacy. A new frontier for social engineering Aside from privacy concerns, AR and VR devices are connected like any other. They're part of a rapidly growing global network that's often dubbed the Internet of Things (IoT). And, like any connected device, they handle the transmission and storage of data, which might be misappropriated by hackers. When it comes to the immersive experiences of AR and VR, this has especially worrying potential in corporate espionage and social engineering. When technology can reach the point of convincing the brain it's somewhere where it's not, the opportunities for taking advantage of human vulnerabilities are enormous. As with any technology, the weakest link is normally the users themselves, which makes AR and VR a unique target for exploiting people. For example, attackers might inject features into VR platforms designed to mislead users into giving away personal information. There are also new implications for ransomware, in which attackers could sabotage platforms and interrupt important meetings before asking for a ransom. VR and AR experiences are only going to get more immersive and more realistic. On the one hand, this might make them more engaging and widely used. On the other, it makes them more dangerous. Fake identities, or so-called 'deepfakes' generated by machine-learning technologies, for example, allow for the manipulation of voices and videos to the extent they still look like genuine footage. If a hacker could access the motion-tracking data from a VR headset, they could potentially use it to create a digital replica. They could then superimpose this on someone else's VR experience, such as an immersive business conference, to carry out a social engineering attack. With people interacting more and more through avatars, this brings an entirely new dimension to the disturbing world of cybercrime. Data breach risks Aside from potentially providing cybercriminals with new ways to manipulate their victims, VR and AR present all the classic cybersecurity risks too. As systems that transmit and store data, they're fair game for anyone wanting to get their hands on the most valuable commodity in the world: personal data. They're also possible targets for denial of service attacks (DDos), which could have very serious implications for those depending on AR in critical situations such as surgical procedures or when operating dangerous machinery. Mitigating the risks isn't as hard as you think To address the risks associated with AR and VR, it's best to start with the core principles of information security – the very same ones that should be governing the wider IT infrastructure across the organization. Although attacks against AR and VR systems manifest themselves in different ways, the technological and administrative measures used to safeguard them are similar to other forms of connected technology. They use the same protocols as any other connected device, so all the standard rules apply – include them in your risk assessments, keep firmware up to date and encrypt any sensitive data. And never take security for granted. Most AR and VR devices don't encrypt data by default, and they may integrate with third-party apps which themselves have dubious security. On top of all the standard measures, AR and VR present some unique challenges, particularly when it comes to physical security and safety. One of the biggest problems with VR specifically is that it completely blocks off a user's visual and auditory connection to the outside world. It's always important to evaluate the physical safety and security of the user's environment first. This also applies to AR, in which it's important for users to maintain a high degree of situational awareness, particularly in more immersive environments. And, it should go without saying, but don't run around in a busy workspace wearing a VR headset! Although identity and access management are central to any information security strategy and concern any device, this is an area that's often overlooked when it comes to the adoption of AR and VR systems. You might, for example, be able to identify other people you're working with by their avatars, but there's also the potential risk of the avatar being copied and used by an unauthorized party. Fortunately, used in the right way, AR and VR can potentially improve identity and access management with multifactor authentication (MFA) – for example using eye-tracking sensors to verify your identity before you can access the rest of the system. While the challenges are undeniable, so is the potential of adopting augmented and virtual reality into the workplace.
data security metaverse

Why brands must get ahead on metaverse privacy and security

  • min read
    • While there's much buzz around the metaverse, few conversations focus on its security, privacy and safety. But these challenges may be even bigger in this emerging space than in the rest of the digital world. I spoke with several experts who agree organizations wanting to embrace this new medium must think about the challenges now – not when the metaverse gains full steam. What is the metaverse? The metaverse is an immersive three-dimensional world where people engage in social and commercial activities through digital avatars. Users can access it on many kinds of connected devices, but it's most immersive when used with a virtual reality (VR) headset. There are many metaverses, including that being developed by Meta, formerly Facebook, Horizon Worlds. Some call it the future of the internet. In this metaverse future, our physical and virtual spaces and lives may converge seamlessly. It could create a common place to work, shop and socialize. Some put this future closer than we might think. Global analysts Gartner predict 25 percent of people will spend at least one hour in the metaverse by 2026. Market Research Future says the metaverse market will grow by 45 percent annually until 2030. By contrast, they expect the Internet of Things (IoT) to grow by just 26 percent each year. Little focus on metaverse security and safety "The metaverse's attack surface [possible entry points for malicious actors] is bigger, and it's also a new technology space," says Nick Donarski, co-founder and chief technology officer at blockchain company ORE System. "Developers don't have the experience, technical resources and exposure for long-term understanding of its security and how it applies to organizations." Al Pascual, senior vice president of enterprise risk solutions at identity security provider Sontiq, thinks we can easily get 'ahead of our skis' when it comes to security. "We invent new ways to give people experiences and products using old security paradigms and have to clean up the mess later," he says. "We must think about security before we start deploying the metaverse to everyone." Securing the 'Wild West' "The metaverse is like the Wild West right now. There aren't even any standards yet," says Aarti Dhapte, senior research analyst at Market Research Future and an author of its metaverse market forecast reports. "You can't even regulate it well because everybody doesn't define the metaverse the same way." Gartner defines the metaverse as "a collective virtual space created by the convergence of virtually enhanced physical and digital reality" that's "device-independent and not owned by a single vendor" with "an independent virtual currency." Other definitions include fully immersive experiences, a three-dimensional overlay on the physical world and a persistent collection of universes we can traverse with digital identities and assets. Despite its early stage, many security experts expect the metaverse will see familiar security threats: Social engineering, phishing, identity theft and more. "Cybercriminals' methods are rarely new. More often, they use the same methods in a new channel," says Pascual, whose fraud prevention career includes working for global banks. Adding blockchain to the mix Many think blockchain will play a central role in the metaverse because of the need to decentralize the space and enable the various worlds within it to interoperate. Cryptocurrency, which uses blockchain, is the natural candidate for metaverse ecommerce. The metaverse could use smart contracts – digital transactions stored on blockchain that self-execute under certain conditions – to implement rules. Also a new technology, blockchain adds complexity and security challenges to the metaverse. And while many think its immutability makes it more secure, recent attacks on blockchain highlight its security shortcomings. Virtual currencies, whether cryptocurrency or non-fungible tokens (NFTs,) are also hard to navigate, especially for a big metaverse user group – children. "It's risky for kids and teens to understand handling virtual money in all forms and can lead to big losses," Dhapte says. People still the weakest link Malicious actors most often use people manipulation to attack. For example, Verizon's 2022 Data Breach Investigations Report says 82 percent of data breaches involve a human element. The metaverse's human element is similarly exploitable. The metaverse will also magnify data privacy concerns. Artur Kane, vice president at secure remote access company GoodAccess, says that since the metaverse is a "world attacking even more of our senses," tech giants can use it to make more money with better-targeted advertising. That means tracking even more of our behavior online. "We give away much more information in the metaverse," says Kane, a frequent privacy speaker at industry events. "Companies can learn much about us – like race, sexual interest, potential health issues." He mentions recent research showing how attackers could exploit hardware and application weaknesses to violate privacy. They set up a benign-looking VR escape room game and inferred many participants' attributes, from height to age to location, with high accuracy using just minutes of gameplay. Regulation far behind Lagging data privacy and security regulation adds to the metaverse's Wild West feel. "We're giving away so much more data than we realize," says Kane. "There's huge potential for data breaches and leaks in a new environment where legislation doesn't restrict much." Blockchain regulation is also lacking, which Dhapte thinks could mean greater chance of fraud. "Since various countries don't have fixed regulations for blockchain, tracking fraudulent activities would be a real challenge for governments." User risks in immersive environments The metaverse is a rich playground for abuse – from sexual harassment to virtual assaults. "Any vulnerable group, especially children, faces higher risk as non-consensual contact and communication might be more intrusive and targeted, given how immersive the experience is," Kane says. A survey by global think tank Wunderman Thompson Intelligence found 66 percent of parents familiar with the metaverse have child safety concerns. Fears are not unfounded – one media investigation found behaviors like racist comments and sexually explicit content directed at children. Pascual of Sontiq says metaverse participants exchange little of monetary value today, "But in ten to 20 years, the potential for financial transactions is huge, especially as digital properties gain value. Thefts will become more meaningful." In the meantime, users still risk fraud. Pascual says scams draw kids looking for cryptocurrency and virtual swag. "We've seen evidence of predators targeting children in open worlds like Roblox. Parental oversight, education and control on who children can engage with and what they can see will be key." An investigation as part of Tomorrow Unlocked's hacker:HUNTER video series found rife hacking in children's games like Roblox, for example stealing hard-won digital items. These hacks had considerable impact on the child gamers. It's harder for parents to monitor children consuming content using VR headsets because they can't look over kids' shoulders as with a computer or phone. That gives brands launching metaverse experiences a greater responsibility to protect users. Protecting business in the metaverse For teams responsible for metaverse experiences, security experts like Pascual emphasize the need for moderation. He sees danger for brands in platforms ineffectively moderated. "Brand trust will be critical, so there's a need for moderation, including monitoring to ensure brands aren't easily imitated," he says. Moderation may not be easy. Tech giant Meta's chief technical officer said moderating user behavior "at any meaningful scale is practically impossible." Still, some experts think self-scrutiny by brands, alongside industry collaboration, will be a business imperative in the metaverse. The good news is security concepts are roughly the same in the metaverse, according to Donarski of ORE Systems. "The fundamental security practices carry over because the architecture is the same. It still runs on a server, you have databases on the backend, user and password management, and so on." It may take a while, but the metaverse will likely become a reality. Companies must consider security and privacy before that reality takes shape – whichever version of the metaverse unfolds.
forests VR

Virtual reality promises the earth, and it might just deliver

  • min read
    • In the last 8,000 years alone, we've destroyed around 80 percent of our forest. In 2018, 3.6 million hectares of rainforest disappeared – an area the size of Belgium. Trees are not just for decorating golf courses. Forests are vital to life on earth. Habitat for plants, animals and insects, they even maintain the climate. There will be children alive today who've never seen a forest and probably never will. But virtual reality may change that. It could allow anyone to experience and learn about forests and habitats that up until now, only a few have been able to see. Deforestation still on the rise In 2019 the Australian bushfires roared through 26 million acres of woodland – an area the size of South Korea. Despite protest, the Amazon is being replaced by crops and cattle at an alarming rate. It shows no sign of slowing. Brazilian Amazon deforestation is now at its highest rate in more than a decade. It can't go on. Forests are nature's nursery and its factory. They're home to billions of species, including humans. People live in forests and rely on their resources. One of these is respite. People of all walks of life use forests to escape, a contrast with increasingly sprawling cities. The world in a headset While deliberate destruction of forests isn't slowing, even those who love natural landscapes can do them harm. A new word only a few years ago, "overtourism" has damaged everything from farms to fragile ecosystems around the world, leading authorities to close sites indefinitely. Add questions posed by the climate impact of air travel, and you might conclude we should simply avoid more trips altogether. That's where virtual reality (VR) comes in. Here's one example of what learning about forests can look like in VR. https://www.youtube.com/watch?v=5JvJCvdqvYs 360-degree film Under the Canopy takes viewers into the depths of the Amazon as if there in person. It's not just about beautiful views. The film's message is, this landscape will be destroyed unless we work hard to protect it. Why VR is learning's powerhouse It's long been known in the study of education that immersive learning, or learning by doing, is optimal for speed and retention of learning at all ages. VR changes learning about into learning through. It's the difference between watching a video that shows how all the parts of an engine fit together, versus taking an engine apart and putting it back together yourself. The 'reality' of virtual reality is also a learning linchpin. If we respond emotionally to what we see and hear, we stay focused longer and remember more. Emotional engagement even improves reasoning and problem solving. Filmmakers and advocacy groups are also using VR to help people understand the need to respond to climate emergency. https://www.youtube.com/watch?v=BaKcbOgtXek The four-part film This is Climate Change explores deforestation, fires and famine. Viewers experience first-hand how civilization suffers as a consequence. It's an emotional ride that leaves you wanting to do more. Business can unlock VR's environmental potential If VR can make such an impact on each one of us, it could bring enormous positive change. Big tech firms and the organizations responsible for forest protection must work together to make environmental learning through VR that's accessible to as many as possible. Tech companies have the platforms and resources to deliver on what VR promises to the planet. The earth won't wait. This article was published in April, 2020.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries