{"id":"https://openalex.org/W4414760824","doi":"https://doi.org/10.1145/3711875.3734381","title":"Demo: UI Based Attacks in WebXR","display_name":"Demo: UI Based Attacks in WebXR","publication_year":2025,"publication_date":"2025-06-23","ids":{"openalex":"https://openalex.org/W4414760824","doi":"https://doi.org/10.1145/3711875.3734381"},"language":"en","primary_location":{"id":"doi:10.1145/3711875.3734381","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711875.3734381","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711875.3734381","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 23rd Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3711875.3734381","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068370078","display_name":"Chandrika Mukherjee","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chandrika Mukherjee","raw_affiliation_strings":["Purdue University, West Lafayette, Indiana, USA"],"raw_orcid":"https://orcid.org/0009-0001-1777-6492","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, Indiana, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056602074","display_name":"Reham Mohamed Aburas","orcid":"https://orcid.org/0009-0002-1364-0229"},"institutions":[{"id":"https://openalex.org/I199440890","display_name":"American University of Sharjah","ror":"https://ror.org/001g2fj96","country_code":"AE","type":"education","lineage":["https://openalex.org/I199440890"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Reham Mohamed Aburas","raw_affiliation_strings":["American University of Sharjah, Sharjah, United Arab Emirates"],"raw_orcid":"https://orcid.org/0009-0002-1364-0229","affiliations":[{"raw_affiliation_string":"American University of Sharjah, Sharjah, United Arab Emirates","institution_ids":["https://openalex.org/I199440890"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093013828","display_name":"Arjun Arunasalam","orcid":"https://orcid.org/0009-0001-1631-6064"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arjun Arunasalam","raw_affiliation_strings":["Purdue University, West Lafayette, USA"],"raw_orcid":"https://orcid.org/0009-0001-1631-6064","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090347232","display_name":"Habiba Farrukh","orcid":"https://orcid.org/0000-0002-3582-5999"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Habiba Farrukh","raw_affiliation_strings":["University of California, Irvine, Irvine, USA"],"raw_orcid":"https://orcid.org/0000-0002-3582-5999","affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, USA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005376753","display_name":"Z. Berkay Celik","orcid":"https://orcid.org/0000-0001-7362-8905"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Z. Berkay Celik","raw_affiliation_strings":["Purdue University, West Lafayette, USA"],"raw_orcid":"https://orcid.org/0000-0001-7362-8905","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"639","last_page":"640"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9599999785423279,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9599999785423279,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/web-browser","display_name":"Web browser","score":0.4343000054359436},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.4185999929904938},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3959999978542328},{"id":"https://openalex.org/keywords/user-interface","display_name":"User interface","score":0.3939000070095062},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.35580000281333923},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.34209999442100525}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7135999798774719},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.5077000260353088},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.45840001106262207},{"id":"https://openalex.org/C2983909278","wikidata":"https://www.wikidata.org/wiki/Q6368","display_name":"Web browser","level":3,"score":0.4343000054359436},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.4185999929904938},{"id":"https://openalex.org/C49774154","wikidata":"https://www.wikidata.org/wiki/Q131765","display_name":"Multimedia","level":1,"score":0.4016999900341034},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3959999978542328},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.3939000070095062},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.35580000281333923},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.34209999442100525},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.32829999923706055},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3165999948978424},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2964000105857849},{"id":"https://openalex.org/C200288055","wikidata":"https://www.wikidata.org/wiki/Q2621792","display_name":"Element (criminal law)","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.2800999879837036},{"id":"https://openalex.org/C194969405","wikidata":"https://www.wikidata.org/wiki/Q170519","display_name":"Virtual reality","level":2,"score":0.27230000495910645}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3711875.3734381","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711875.3734381","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711875.3734381","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 23rd Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3711875.3734381","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711875.3734381","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711875.3734381","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 23rd Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4906092983","display_name":null,"funder_award_id":"CNS-2144645","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6062656956","display_name":null,"funder_award_id":"IIS-2229876","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6360409883","display_name":"AI Institute for Agent-based Cyber Threat Intelligence and Operation","funder_award_id":"2229876","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8411576471","display_name":"CAREER: Compositional IoT Safety and Security in Physical Spaces","funder_award_id":"2144645","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414760824.pdf","grobid_xml":"https://content.openalex.org/works/W4414760824.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"WebXR":[1],"API":[2],"enables":[3],"immersive":[4,92],"AR/VR":[5],"experiences":[6],"directly":[7],"through":[8],"web":[9],"browsers":[10],"on":[11],"head-mounted":[12],"displays":[13],"(HMDs).":[14],"However,":[15],"prior":[16,49],"research":[17],"shows":[18],"that":[19,31],"security-sensitive":[20],"UI":[21],"properties":[22],"and":[23,88],"the":[24,44,60,82],"lack":[25],"of":[26],"an":[27],"<iframe>":[28],"like":[29],"element":[30],"separates":[32],"different":[33],"origins":[34],"can":[35],"be":[36],"exploited":[37],"to":[38,84],"manipulate":[39],"user":[40],"actions,":[41],"particularly":[42],"within":[43],"advertising":[45],"ecosystem.":[46,62],"In":[47],"our":[48,97],"work,":[50],"we":[51],"proposed":[52],"five":[53],"novel":[54],"UI-based":[55],"attacks":[56,67],"in":[57,68],"WebXR,":[58],"targeting":[59],"ad":[61],"This":[63],"demo":[64,98],"presents":[65],"these":[66],"a":[69],"unified":[70],"gaming":[71],"application,":[72],"embedding":[73],"each":[74],"into":[75],"distinct":[76],"interactive":[77],"scenarios.":[78],"Our":[79],"work":[80],"highlights":[81],"need":[83],"address":[85],"design":[86],"challenges":[87],"requirements":[89],"for":[90],"improving":[91],"web-based":[93],"experiences.":[94],"We":[95],"provide":[96],"video":[99],"at:":[100],"https://youtu.be/lTBQbxnNq34.":[101]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}