A Systematic Literature Review on Fundamental Technologies and Security Challenges in the Metaverse Platforms
Krishno Dey, Diogo Barradas, Saqib Hakak
TL;DR
The paper addresses the security and privacy challenges of Metaverse platforms by performing a systematic literature review of enabling technologies and threats. It introduces a CIA-aligned threat taxonomy, surveys vulnerabilities across users, avatars, and technology domains, and catalogs existing countermeasures and governance issues. The work highlights research gaps, proposes future directions (standardization, input provenance, deepfake defense, and privacy-preserving mechanisms), and emphasizes secure-by-design approaches for scalable, ethical Metaverse adoption. The findings provide a structured roadmap for researchers, developers, and policymakers to build secure, trustworthy, and sustainable Metaverse ecosystems.
Abstract
The Metaverse utilizes emerging technologies such as Extended Reality (XR), Artificial Intelligence (AI), blockchain, and digital twins to provide an immersive and interactive virtual experience. As Metaverse continues to evolve, it bring a range of security and privacy threats, such as identity management, data governance, and user interactions. This survey aims to provide a comprehensive review of the enabling technologies for the Metaverse. It also aims to provide a thorough analysis of key vulnerabilities and threats that may compromise its sustainability and user safety. We perform a systematic literature review (SLR) to identify key vulnerabilities and their countermeasures in Metaverse platforms. Metaverse offers a much larger attack surface compared to conventional digital platforms. Immersive, decentralized, and permanent characteristics of the Metaverse generate new vulnerabilities. Although there are many countermeasures to these vulnerabilities, most of them are theoretical or have not been tested in real-world environments. Our review highlights current advancements, identifies research gaps, and outlines future directions to ensure a secure, resilient, and ethically governed Metaverse.