Enhancing cybersecurity measures in virtual reality and augmented reality environments : Challenges, risks, and solutions

Saxena, Shivangi; Srivastava, Satyajee; Dudeja, Deepak; Pravina, C. T. Dora; Kapila, Neha; Narooka, Preeti

doi:10.47974/JDMSC-2444

Open Access Research Article

Enhancing cybersecurity measures in virtual reality and augmented reality environments : Challenges, risks, and solutions

Shivangi Saxenashivangisaxena.research@gmail.comDepartment of Management Jaypee Business School Jaypee Institute of Information TechnologyNoida, Uttar Pradesh, 201309, IndiaView full profile → , Satyajee Srivastavasatyajeesrivastava.set@mriu.edu.inDepartment of Computer Science & Engineering School of Engineering & Technology Manav Rachna International Institute of Research & Studies (Deemed to be University)Faridabad, Haryana, 121010, IndiaView full profile → , Deepak Dudejadeepak.dudeja@mmumullana.orgDepartment of Computer Science and Engineering Maharishi Markandeshar Engineering College Maharishi Markandeshar (Deemed to be University) MullanaAmabala, Haryana, 133207, IndiaView full profile → , C. T. Dora Pravinatdorapravinac@veltech.edu.inDepartment of Mathematics Vel Tech Rangarajan Dr Sagunthala R &D Institute of Science and Technology Avadi Chennai, Tamil Nadu, 600055, IndiaView full profile → , Neha Kapilaneha.31020@lpu.co.inDepartment of Electronics and Electrical Engineering Lovely Professional UniversityPhagwara, Punjab, 144411, IndiaView full profile → , ^*Preeti NarookaCorresponding authorpreeti.narooka@jaipur.manipal.eduSchool of Computer Science and Engineering Manipal University JaipurDepartment of Artificial Intelligence and Machine Learning Manipal University Jaipur Jaipur, Rajasthan, 303007, IndiaView full profile →

* Corresponding author · click or hover a name for details

pp. 3001–3011Vol. 28Issue 8December 2025DOI: 10.47974/JDMSC-2444 Crossmark XML

Received:: 05 Feb 2025
Published Online:: 08 Dec 2025
Article type:: Research Article
Language:: EN
Article no.:: JDMSC-2444
Pages:: 3001–3011

Abstract

New opportunities for immersive and interactive experiences have been created by the incorporation of Virtual Reality (VR) and Augmented Reality (AR) technology into a variety of industries, including business, healthcare, education, and entertainment. But this progress also brings with it hitherto unheard-of cybersecurity risks. Cyberattacks are drawn to VR/AR environments because of the complex data streams they include, including biometric data, personal data, and real-time geographical mapping. This study investigates the cybersecurity threats related to VR/AR platforms, including identity theft, device manipulation, data breaches, and invasions of privacy. It also covers new dangers such as malware directed at immersive apps and the use of sensory weaknesses to create bodily damage in real life. These vulnerabilities are made worse by the absence of standardized security standards in VR/AR systems, underscoring the necessity of strong security frameworks. End-to-end encryption, multi-factor authentication, biometric data protection, and the creation of safe software and hardware ecosystems are highlighted as viable remedies. In addition, ethical issues pertaining to data ownership and privacy are explored, along with suggestions for legislative actions to shield consumers from online dangers. Maintaining the security of VR/AR technologies is essential to building confidence and providing consumers worldwide with secure, immersive experiences as they develop.

Keywords

Cybersecurity Virtual reality security Augmented reality security VR threats AR threats Biometric security Malware protection Haptic security Network security Encryption AI-based threat detection Cyber attacks in immersive environments Secure XR systems

Subject Classifications

68M2568U9994A60

References

[1] A. M. Alnajim, S. Habib, M. Islam, H. S. AlRawashdeh, and M. Wasim, “Exploring cybersecurity education and training techniques: A comprehensive review of traditional, virtual reality, and augmented reality approaches,” Symmetry, vol. 15, no. 12, p. 2175 (2023).
[2] N. M. Alzahrani and F. A. Alfouzan, “Augmented reality (AR) and cyber-security for smart cities—A systematic literature review,” Sensors, vol. 22, no. 7, p. 2792 (2022).
[3] Y. V. Rangaiah, A. K. Sharma, T. Bhargavi, M. Chopra, C. Mahapatra, and A. Tiwari, “A taxonomy towards blockchain-based multimedia content security,” in Proceedings of the 2022 2nd International Conference on Innovative Sustainable Computational Technologies (CISCT), pp. 1–4, IEEE (Dec. 2022).
[4] H. Alqahtani and M. Kavakli-Thorne, “Design and evaluation of an augmented reality game for cybersecurity awareness (CybAR),” Information, vol. 11, no. 2, p. 121 (2020).
[5] N. K. Singh, A. Jain, S. Arya, W. E. G. Gonzales, J. E. A. Flores, and A. Tiwari, “Attack detection taxonomy system in cloud services,” in Proceedings of the 2022 2nd International Conference on Innovative Sustainable Computational Technologies (CISCT), pp. 1–5, IEEE (Dec. 2022).
[6] K. H. Wang and W. C. Lee, “Developing a digital twin and augmented reality monitoring system with consideration of cybersecurity,” International Journal of iRobotics, vol. 6, no. 1, pp. 8–11 (2023).
[7] A. Tiwari and R. Garg, “Reservation system for cloud computing resources (RSCC): Immediate reservation of the computing mechanism,” International Journal of Cloud Applications and Computing (IJCAC), vol. 12, no. 1, pp. 1–22 (2022).
[8] Z. Lv, D. Chen, R. Lou, and H. Song, “Industrial security solution for virtual reality,” IEEE Internet of Things Journal, vol. 8, no. 8, pp. 6273–6281 (2020).
[9] A. Tiwari and R. M. Sharma, “Realm towards service optimization in fog computing,” in Research Anthology on Architectures, Frameworks, and Integration Strategies for Distributed and Cloud Computing, IGI Global, pp. 1530–1563 (2021).
[10] A. Alismail, E. Altulaihan, M. H. Rahman, and A. Sufian, “A systematic literature review on cybersecurity threats of virtual reality (VR) and augmented reality (AR),” in Data Intelligence and Cognitive Informatics: Proceedings of ICDICI 2022, pp. 761–774 (2022).
[11] A. Tiwari and R. Garg, “Adaptive ontology-based IoT resource provisioning in computing systems,” International Journal on Semantic Web and Information Systems (IJSWIS), vol. 18, no. 1, pp. 1–18 (2022).
[12] A. M. Alnajim, S. Habib, M. Islam, H. S. AlRawashdeh, and M. Wasim, “Exploring cybersecurity education and training techniques: A comprehensive review of traditional, virtual reality, and augmented reality approaches,” Symmetry, vol. 15, no. 12, p. 2175 (2023).
[13] D. Dudeja, S. M. Sabharwal, Y. Ganganwar, M. Singhal, N. Goyal, and A. Tiwari, “Sales-based models for resource management and scheduling in artificial intelligence systems,” Engineering Proceedings, vol. 59, no. 1, p. 43 (2023).
[14] O. O. Oyewole, O. G. Fakeyede, E. C. Okeleke, A. J. Apeh, and O. R. Adaramodu, “Security considerations and guidelines for augmented reality implementation in corporate environments,” Computer Science & IT Research Journal, vol. 4, no. 2, pp. 69–84 (2023).
[15] A. Tiwari and R. Garg, “ACCOS: A hybrid anomaly-aware cloud computing formulation-based ontology services in clouds,” in Proceedings of ISIC Conference, pp. 341–346 (2021).
[16] S. Kumar, S. Kumar, N. Ranjan, S. Tiwari, T. R. Kumar, D. Goyal, M. K. Rafsanjani, “Digital watermarking-based cryptosystem for cloud resource provisioning,” International Journal of Cloud Applications and Computing (IJCAC), vol. 12, no. 1, pp. 1–20 (2022).
[17] S. Kumar, P. K. Srivastava, G. K. Srivastava, P. Singhal, D. Singh, and D. Goyal, “Chaos-based image encryption security in cloud computing,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 25, no. 4, pp. 1041–1051 (2022).
[18] S. Kumar, K. K. Dubey, A. K. Gautam, S. Verma, V. Kumar, and U. Mamodiya, “Detection of recurring vulnerabilities in computing services,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 25, no. 4, pp. 1063–1071 (2022).
[19] S. Kumar, P. K. Srivastava, A. K. Pal, V. P. Mishra, P. Singhal, G. K. Srivastava, and U. Mamodiya, “Protecting location privacy in cloud services,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 25, no. 4, pp. 1053–1062 (2022).
[20] M. Malik, M. Kumar, V. Kumar, A. K. Gautam, S. Verma, S. Kumar, and D. Goyal, “High-level browser security in cloud computing services from cross-site scripting attacks,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 25, no. 4, pp. 1073–1081 (2022).

Views: 172Downloads: 7Citations: 1