LensCap
Jinhan Hu, Andrei Iosifescu, Robert LiKamWa
Abstract
Augmented Reality (AR) enables smartphone users to interact with virtual content spatially overlaid on a continuously captured physical world. Under the current permission enforcement model in popular operating systems, AR apps are given Internet permission at installation time, and request camera permission and external storage write permission at runtime through a user's approval. With these permissions granted, any Internet-enabled AR app could silently collect camera frames and derived visual information for malicious intent without a user's awareness. This raises serious concerns about the disclosure of private user data in their living environments.
Topics & Concepts
PermissionComputer scienceThe InternetInternet privacyEnforcementAugmented realityLaw enforcementVirtual worldComputer securityWorld Wide WebHuman–computer interactionPolitical scienceLawAdvanced Malware Detection TechniquesUser Authentication and Security SystemsDigital and Cyber Forensics