Silent Shield: Dynamic Instrumentation of Privacy Breaches in Oculus VR Applications
12th International Conference on Information Systems Security and Privacy, Marbella, İspanya, 4 - 06 Mart 2026, cilt.1, ss.127-135, (Tam Metin Bildiri)
- Yayın Türü: Bildiri / Tam Metin Bildiri
- Cilt numarası: 1
- Doi Numarası: 10.5220/0014241800004061
- Basıldığı Şehir: Marbella
- Basıldığı Ülke: İspanya
- Sayfa Sayıları: ss.127-135
- Ankara Yıldırım Beyazıt Üniversitesi Adresli: Evet
Özet
Rising Virtual Reality (VR) adoption necessitates urgent scrutiny of application privacy, yet existing analysis tools often fail to capture Unity-based data flows that are abstracted from the standard Android stack. We present Silent Shield, a lightweight, fully automated dynamic instrumentation framework targeting Uni-tyWebRequest to intercept and control sensitive traffic in Oculus VR applications. Our approach requires neither source code nor root privileges. Leveraging IL2CppDumper, dnSpy, and Frida, we dynamically hook networking methods to inspect and modify outbound traffic in real-time. Evaluation across fourteen Meta Quest applications demonstrates effective interception with minimal overhead (less than 30 ms), confirming the framework’s viability for privacy enforcement in the Unity-dominated VR ecosystem.