Search arXiv⌕ Search
Home/Archive/arXiv

arXiv · 2605.27939

EyeSpy: Inferring Eye Gaze via Side-Channel Attacks Against Foveated Rendering

Paul Maynard·Harris Amjad·Camila Molinares·Bo Ji·Brendan David-John
View original source ↗Read source document ↗Export metadata ↓

Abstract

While eye tracking provides valuable capabilities for virtual reality, such as gaze interaction and dynamic foveated rendering (DFR), eye-tracking data can inadvertently reveal sensitive user information if not properly protected. Current protections, such as adding permission prompts or gatekeeping gaze data, are insufficient on DFR-enabled systems because gaze data is used internally to drive DFR. When DFR is implemented, objects in the fovea (i.e., immediate gaze area) incur a higher GPU workload than those in the periphery. This gaze-contingent workload creates a novel side channel, which can be leveraged to reconstruct gaze positions. Specifically, we design a novel attack that sweeps imperceptible high-cost objects (HCOs) across the user's field of view and logs rendering performance metrics (e.g., frame rate or frame time) commonly exposed through standard game engines. Then, we correlate variation in these metrics (caused by HCO-foveal overlap) with the known HCOs' positions to infer gaze coordinates directly without using eye-tracking APIs. Our experimental results show that mean gaze prediction errors (1.1-4.4 degrees) across the Meta Quest Pro, Varjo XR-4, and desktop platforms are comparable to typical eye-tracker accuracy. We demonstrate that the attack generalizes across various hardware platforms, standard game engines, and foveated rendering pipelines. Finally, we design defense mechanisms based on supervised and unsupervised detectors that can flag the attack reliably (F1 of 0.99) over short time windows.

Explore related subjects

cs.HC

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Paul Maynard, Harris Amjad, Camila Molinares, Bo Ji, Brendan David-John. 2026-05-27. EyeSpy: Inferring Eye Gaze via Side-Channel Attacks Against Foveated Rendering. https://doi.org/10.1109/sp63933.2026.00145

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related papers

arXiv2026

TrialCompass: Visual Analytics for Enhancing the Eligibility Criteria Design of Clinical Trials

Eligibility criteria play a critical role in clinical trials by determining the target patient population, which significantly influences the outcomes of medical interventions. However, current approaches for designing eligibility criteria have limitations to support interactive exploration of the large space of eligibility criteria. They also ignore incorporating detailed characteristics from the original electronic health record (EHR) data for criteria refinement. To address these limitations, we proposed TrialCompass, a visual analytics system integrating a novel workflow, which can empower clinicians to iteratively explore the vast space of eligibility criteria through knowledge-driven and outcome-driven approaches. TrialCompass supports history-tracking to help clinicians trace the evolution of their adjustments and decisions when exploring various forms of data (i.e., eligibility criteria, outcome metrics, and detailed characteristics of original EHR data) through these two approaches. This feature can help clinicians comprehend the impact of eligibility criteria on outcome metrics and patient characteristics, which facilitates systematic refinement of eligibility criteria. Using a real-world dataset, we demonstrated the effectiveness of TrialCompass in providing insights into designing eligibility criteria for septic shock and sepsis-associated acute kidney injury. We also discussed the research prospects of applying visual analytics to clinical trials.

cs.HC↗
arXiv2026

PRIMMDebug: Teaching Secondary School Students a Reflective Approach to Debugging

Debugging is a challenging and infuriating experience for many secondary school students learning their first text-based programming language. One frequent problem is the lack of reflection in students' debugging strategies, which makes error resolution unlikely and teacher reliance common. Tools that encourage more reflective and teacher-independent debugging may foster more success with fixing errors, but are lacking. This paper presents PRIMMDebug, an approach for teaching the debugging process to secondary school students. PRIMMDebug consists of an online tool that takes students through the steps of a pedagogical process based on PRIMM, a framework for teaching programming. The tool encourages written articulation throughout the debugging process and limits students' ability to run and edit code at certain stages. A classroom study with PRIMMDebug found a general reluctance among students to engage with the reflection it promotes, despite teachers appreciating this emphasis on reflection. We end by suggesting three considerations for future pedagogical debugging research and tooling: balance structure and flexibility, teach shorter debugging heuristics, and use tooling early on in students' programming journey.

cs.HC↗
arXiv2026

Mirror Skin: In Situ Visualization of Robot Touch Intent on Robotic Skin

Effective communication of robot touch intent is essential for safe and predictable physical human-robot interaction. While intent communication has been widely studied, existing approaches lack the spatial specificity and semantic depth necessary to efficiently convey robot touch intent. We present Mirror Skin, a cephalopod inspired concept that mirrors in-situ visual representations of a human's body parts onto the corresponding robot's touch region to communicate who shall initiate touch, where it will occur, and when it is imminent. We informed the design of Mirror Skin through a structured design exploration with experts and demonstrate the real-world feasibility of Mirror Skin with a proof-of-concept prototype. User studies in VR and with the physical prototype showed that Mirror Skin significantly improves accuracy and response times for interpreting touch intent and improves the user experience during physical human-robot interactions.

cs.HC↗