Virtual reality systems are increasing in popularity and are being applied to new areas as time moves on. Gaming and entertainment however still remain the most frequent implementation of virtual reality systems. Many applications are delivered over the internet which exposes a system to a number of security threats. This thesis investigates what methods an attacker potentially could use in an attempt to gain knowledge about a virtual reality user, with emphasis on reading user movements. A dedicated testbed is constructed in an attempt to compromise the users integrity based on the raw packet data sent over the network. Our findings indicate that the testbed in theory should be able to identify user actions. Further work is however needed in order to make it useful in an uncontrolled environment. Other methods show promising results, indicating that an attacker could learn what games a user is playing in an application like VRchat. These other methods did however not show indications of being able to reveal information about user movements.

Cloud gaming has emerged as a popular solution to meet the increasing hardware de-mands of modern video games, allowing players with dated or non-sufficient hardwareto access high-quality gaming experiences. However, the growing reliance on cloud ser-vices has led to heightened concerns regarding user privacy and the risk of fingerprintingattacks. In this paper, we investigate the effects of varying send rates on cloud gamingQoS and QoE metrics when applying a fixed-rate fingerprinting defense, BuFLO. Findingsshow that lower send rates impact both client-side and host-side applied defense differ-ently. Based on the results, specific send rates are suggested for maintaining a stable cloudgaming experience. The research offers insights into the trade-offs between security andperformance in cloud gaming and provides recommendations for mitigating fingerprintingattacks. Future work may investigate alternative defenses, device types, and connectionmethods.