Addressing Cybersecurity and Data Privacy concerns in the evolving world of AR, VR and Metaverse. Mihir Mistry is a leader in Strategy, Governance, Risk and Compliance. Leads the delivery service lines for Controls & Compliance, Risk & Advisory, Cloud and Architecture. Takes a very programmatic approach to solving and delivering security based projects. Proven business and entrepreneurial skills to deliver custom, highly visible projects in front of the C-suite and Board of Directors. Diverse knowledge base and framework expertise that includes NIST, HIPAA, HITRUST, CIS, GLBA, ISO, GDPR, CLOUD, PCI and others. Global experience across North America, Europe, Asia and Australia. https://gdg.community.dev/events/details/google-gdg-cloud-southlake-presents-gdg-cloud-southlake-15-mihir-mistry-cybersecurity-and-data-privacy-in-an-arvr-metaverse-world/

1. Cybersecurity and
Privacy in the AR,
VR and Metaverse
Mihir Mistry
Dallas, TX
https://www.linkedin.com/in/mihir-mistry16/

2. Agenda
• Background
• VR, AR, Metaverse
• Principals of Cyber Security
• Principals of Privacy
• Digital Data Currency
• Opportunities & Risks

3. Virtual Reality (vir·tu·al re·al·i·ty)
“the computer-generated simulation of a three-dimensional image or environment that can be interacted with in a seemingly real or
physical way by a person using special electronic equipment, such as a helmet with a screen inside or gloves fitted with sensors.”
• From 1838 – 2022: Stereoscope to Hololens 2
(Microsoft)
• Industries: Manufacturing, Healthcare,
Engineering, Defense, Retail, Transportation and
so on …
• Top benefits of VR:
• Revolutionize the ‘Try Before You Buy’ Concept
• Introduce established products to new audiences
• Prototyping and design

4. Augmented Reality (aug·men·ted re·al·i·ty)
“a technology that superimposes a computer-generated image on a user's view of the real world, thus providing a composite view.”
• Augmented reality was first achieved, to some extent, by a cinematographer
called Morton Heilig in 1957. He invented the Sensorama which delivered
visuals, sounds, vibration and smell to the viewer. Of course, it wasn’t
computer controlled but it was the first example of an attempt at adding
additional data to an experience.
• Example of companies and apps that heavily use AR:
• Snapchat
• TikTok
• Google
• Facebook (Meta)
• Microsoft
• Apple
• Immersive experiences ….
• Now jointly also known as MIXED REALITY (AR+VR).

5. Metaverse (met·a·verse)
“a virtual-reality space in which users can interact with a
computer-generated environment and other users.”
• “The metaverse was first described and named almost 30 years ago (ref: Snow Crash) — but
we’re still in the early days. Computing power, headsets, software protocols and networking
capacity just aren’t ready yet to support a truly immersive and shared metaverse.”
• Consumer
• B2C Companies, gaming, shopping …
• Commercial
• Immersion, inclusive experiences
• Improve product design, etc.
• Industrial
• Supply chain, manufacturing ..
• Reduce carbon footprint
Sources:
Microsoft Metaverse
Shift Medical Congress

6. Is Metaverse for real?

7. Who is already on Metaverse

8. Opportunities = Risks
Security
Privacy
Governance

9. Cybersecurity 101
• IDENTIFY
• PROTECT
• DETECT
• RESPOND
• RECOVER

10. Cybersecurity concerns
• NFTs
• Darkverse
• Financial Fraud
• [Cyber] Physical Threats
• Deepfake
• Social Engineering
• Ethics & Responsibility
• Moderation of Speech (fake news, cyber bullying, etc.)
https://www.securitymagazine.com/articles/98142-9-security-threats-in-the-metaverse

11. Privacy 101
AICPA/GAPP
Management Notice
Choice & Consent Collection
Use, Retention & Disposal Access
Disclosure of third parties Security for privacy
Quality Monitoring and Enforcement
NIST Framework

12. Privacy Concerns
• Global issue

13. Evolution of Data Collection =
Creating Data Currency
• Web 2.0
• User behavior on the web.
• Entry page, time spent on page, sessions, repeat visitor,
location capture …
• Search Engine Optimization (SEO) 2.0
• Web 3.0
• Body movements
• Brainwaves
• Physiological responses
• SEO 3.0?

14. Misuse of Data
• Selling data without proper consent
• Doxing/Doxxing
• Cyber bullying/online shaming
• New “Denial of Service - DOS”
• Raiding
• Coordinated harassment
• Video call bombing

15. Best practices
to follow
• Treat your virtual identity
with the same rigor as
your physical identity.
• Leverage end to end
encryption protocols to
protect your information.
• Companies should build a
strong IAM interoperable
model.
Source: https://tozny.com/blog/applying-privacy-and-identity-best-practices-to-the-metaverse/

16. Future of travel industry in Metaverse
• Destination window shopping
• Historical Travel
• Hotel and Cruise ship walkthrough
• Travel Bucket List
• Airlines
• Metaverse Tourism
• Space Travel
• Superbowl LIX (25’)

17. Thank You

18. References
• https://www.vrs.org.uk/virtual-reality/history.html
• https://www.microsoft.com/en-us/hololens
• https://tools.totaleconomicimpact.com/go/microsoft/HoloLens2/
• https://www.interaction-design.org/literature/article/augmented-reality-the-past-the-present-and-the-
future#:~:text=Augmented%20reality%20was%20first%20achieved,and%20smell%20to%20the%20viewer
• https://101blockchains.com/metaverse-tourism/
• https://www.sabre.com/locations/india/resources/news/will-the-metaverse-change-the-way-the-travel-industry-
• https://nvlpubs.nist.gov/nistpubs/ir/2017/NIST.IR.8062.pdf
• https://iapp.org/news/a/metaverse-and-privacy-2/