philip lelyveld The world of entertainment technology

While these advanced capabilities of augmented and virtual reality have the potential to revolutionize many industries in positive ways, they also introduce new threats. The implementation of augmented reality in a highly classified environment, industrial control facility, nuclear power station, military base, or any research and development lab that supports defense research could lead to disaster in the wrong hands.

An adversary capable of compromising the application program interface (API) that connects augmented reality software to an automobile’s heads-up display could remotely crash the car. A threat actor could also breach augmented reality glasses to access what amounts to a livestream of personal data without the wearer’s knowledge.

In addition, a malicious insider could wear augmented reality glasses to work to gather intelligence, commit industrial espionage or upload anything the device picks up to a personal cloud. Commercial sector customers might accidentally upload data collected through an augmented reality device to a public cloud. Furthermore, mobile apps designed for integration with augmented reality are susceptible to bad coding practices, insufficient security controls, bad updates, zero-day exploits and malware, just like any other type of software.

Augmented reality is going to be a very unique technology for information security professionals to contend with because of its significant potential to be both helpful and extremely harmful. This technology could solve one problem while simultaneously introducing one or more new ones. Individuals experimenting with the technology, groups developing standards for it, companies creating software and APIs, and organizations deploying augmented reality in one way or another should think very carefully about the direction this technology should move in.

See the full post here: https://securityintelligence.com/virtual-reality-augmented-reality-and-futuristic-threat-modeling/