Edgar Weippl

• E-Mail
• Phone: +43 (1) 505 36 88
• Fax: +43 (1) 505 88 88

Bio

Edgar R. Weippl (CISSP, CISA, CISM, CRISC, CSSLP, CMC) is Research Director of SBA Research and Associate Professor (Privatdozent)  at the Vienna University of Technology. His research focuses on applied concepts of IT-security and e-learning. Edgar is member of the editorial board of Computers & Security (COSE) and he organizes the ARES conference.

After graduating with a Ph.D. from the Vienna University of Technology, Edgar worked for two years in a research startup. He then spent one year teaching as an assistant professor at Beloit College, WI. From 2002 to 2004, while with the software vendor, he worked as a consultant in New York, NY and Albany, NY, and in Frankfurt, Germany. In 2004 he joined the Vienna University of Technology and founded together with A Min Tjoa and Markus Klemen the research center SBA Research.

Publications

• Sebastian Schrittwieser and Peter Fruehwirt and Peter Kieseberg and Manuel Leithner and Martin Mulazzani and Markus Huber and Edgar R. Weippl, "Guess Who Is Texting You? Evaluating the Security of Smartphone Messaging Applications," in Network and Distributed System Security Symposium (NDSS 2012), 2012. BibTeX
  @INPROCEEDINGS{Schrittwieser_Guess_Who_s_Texting_You_Evalua_2012,
  Author = {Sebastian Schrittwieser and Peter Fruehwirt and Peter Kieseberg and Manuel Leithner and Martin Mulazzani and Markus Huber and {Edgar R.} Weippl},
  sbahotlist = {true},
  title = {Guess Who Is Texting You? Evaluating the Security of Smartphone Messaging Applications},
  booktitle = {Network and Distributed System Security Symposium (NDSS 2012)},
  year = {2012},
  month = {2},
  }
• Markus Huber and Martin Mulazzani and Edgar R. Weippl and Gerhard Kitzler and Sigrun Goluch, "Friend-in-the-middle Attacks: Exploiting Social Networking Sites for Spam," IEEE Internet Computing: Special Issue on Security and Privacy in Social Networks, 2011. BibTeX | PDF
  @ARTICLE{Huber_Friend_in_the_middle_Attacks_E_2011,
  Author = {Markus Huber and Martin Mulazzani and {Edgar R.} Weippl and Gerhard Kitzler and Sigrun Goluch},
  title = {Friend-in-the-middle Attacks: Exploiting Social Networking Sites for Spam},
  journal = {IEEE Internet Computing: Special Issue on Security and Privacy in Social Networks},
  year = {2011},
  month = {5},
  pdf = {FITM_InternetComputing_preprint.pdf},
  note = {Pre Print},
  }
• Martin Mulazzani and Sebastian Schrittwieser and Manuel Leithner and Markus Huber and Edgar R. Weippl, "Dark Clouds on the Horizon: Using Cloud Storage as Attack Vector and Online Slack Space," in USENIX Security, 2011. BibTeX | PDF
  @INPROCEEDINGS{Mulazzani_Dark_Clouds_on_the_Horizon_Usi_2011,
  Author = {Martin Mulazzani and Sebastian Schrittwieser and Manuel Leithner and Markus Huber and {Edgar R.} Weippl},
  sbahotlist = {true},
  title = {Dark Clouds on the Horizon: Using Cloud Storage as Attack Vector and Online Slack Space},
  booktitle = {USENIX Security},
  year = {2011},
  month = {8},
  pdf = {dropboxUSENIX2011.pdf},
  }
• Markus Huber and Martin Mulazzani and Manuel Leithner and Sebastian Schrittwieser and Gilbert Wondracek and Edgar R. Weippl, "Social Snapshots: Digital Forensics for Online Social Networks," in Annual Computer Security Applications Conference (ACSAC), 2011. BibTeX | PDF
  @INPROCEEDINGS{_Social_Snapshots_Digital_Foren_2011,
  Author = {Markus Huber and Martin Mulazzani and Manuel Leithner and Sebastian Schrittwieser and Gilbert Wondracek and {Edgar R.} Weippl},
  sbahotlist = {true},
  title = {Social Snapshots: Digital Forensics for Online Social Networks},
  booktitle = {Annual Computer Security Applications Conference (ACSAC)},
  year = {2011},
  month = {12},
  pdf = {social_snapshots_preprint.pdf},
  }
• Martin Mulazzani and Markus Huber and Edgar R. Weippl, "Anonymity and Monitoring: How to Monitor the Infrastructure of an Anonymity System," IEEE Transactions on Systems, Man, and Cybernetics, Part C: Applications and Reviews, pp. 539-546, 2010. BibTeX
  @ARTICLE{Mulazzani_Anonymity_and_Monitoring_How_t_2010,
  Author = {Martin Mulazzani and Markus Huber and {Edgar R.} Weippl},
  title = {Anonymity and Monitoring: How to Monitor the Infrastructure of an Anonymity System},
  journal = {IEEE Transactions on Systems, Man, and Cybernetics, Part C: Applications and Reviews},
  year = {2010},
  month = {9},
  pages = {539-546},
  }
• Markus Huber and Martin Mulazzani and Edgar R. Weippl and Gerhard Kitzler and Sigrun Goluch, "Exploiting social networking sites for spam," in Proceedings of the 17th ACM conference on Computer and communications security, 2010, pp. 693-695. BibTeX | PDF
  @INPROCEEDINGS{Huber_Proceedings_of_the_17th_ACM_co_2010,
  Author = {Markus Huber and Martin Mulazzani and {Edgar R.} Weippl and Gerhard Kitzler and Sigrun Goluch},
  title = {Exploiting social networking sites for spam},
  booktitle = {Proceedings of the 17th ACM conference on Computer and communications security},
  year = {2010},
  month = {10},
  pdf = {Poster_CCS_2010.pdf},
  pages = {693-695},
  note = {Poster - ACM CCS 2010},
  }
• Markus Huber and Martin Mulazzani and Sigrun Goluch and Gerhard Kitzler and Edgar R. Weippl, "Poster ACM CCS 2010: Friend-in-the-middle Attacks," in Proceedings of the 17th ACM conference on Computer and communications security, 2010. BibTeX
  @INPROCEEDINGS{Huber_Poster_ACM_CCS_2010_Friend_in__2010,
  Author = {Markus Huber and Martin Mulazzani and Sigrun Goluch and Gerhard Kitzler and {Edgar R.} Weippl},
  title = {Poster ACM CCS 2010: Friend-in-the-middle Attacks},
  booktitle = {Proceedings of the 17th ACM conference on Computer and communications security},
  year = {2010},
  month = {10},
  }
• Stefan Fenz and Edgar R. Weippl and Andreas Ekelhart and Gernot Goluch and Markus Steinkellner, "XML Security – A comparative literature review," Journal of Systems and Software, vol. 81, pp. 1715-1724, 2008. BibTeX | PDF
  @ARTICLE{Ekelhart_XMLSecurity_2008,
  Author = {Stefan Fenz and {Edgar R.} Weippl and Andreas Ekelhart and Gernot Goluch and Markus Steinkellner},
  sbahotlist = {true},
  title = {XML Security - A comparative literature review},
  journal = {Journal of Systems and Software},
  year = {2008},
  month = {1},
  abstract = {Since the turn of the millenium, Working Groups of the W3C have been concentrating on the development of XML based security standards, which are paraphrased as XML Security. XML Security consists of three recommendations: XML (Digital) Signature, XML Encryption and XML Key Management Specification (XKMS), all of them published by the W3C. By means of a review of the available literature the authors draw several conclusions about the status quo of XML Security. Furthermore the current state and focuses of research as well as the existing challenges are derived. Trends to different application areas - e.g. use of XML Security for Mobile Computing - are also outlined. Based on this information the analyzed results are discussed and a future outlook is predicted.},
  pdf = {2008 - Ekelhart - XML security -- A Comparative Literature Review.pdf},
  volume = {81},
  pages = {1715-1724},
  note = {ISSN: 0164-1212},
  }
• Stefan Fenz and Edgar R. Weippl and Markus Klemen and Andreas Ekelhart, "Security Ontologies: Improving Quantitative Risk Analysis," in Proceedings of the 40th Hawaii International Conference on System Sciences, HICSS2007, 2007, pp. 156-162. BibTeX | PDF
  @INPROCEEDINGS{Ekelhart_SecurityOntologiesImproving_2007,
  Author = {Stefan Fenz and {Edgar R.} Weippl and Markus Klemen and Andreas Ekelhart},
  sbahotlist = {true},
  title = {Security Ontologies: Improving Quantitative Risk Analysis},
  booktitle = {Proceedings of the 40th Hawaii International Conference on System Sciences, HICSS2007},
  year = {2007},
  month = {1},
  pdf = {2007 - Ekelhart - Security Ontologies Improving Quantitative Risk Analysis.pdf},
  pages = {156-162},
  publisher = {IEEE Computer Society},
  note = {0-7695-2755-8},
  }
• Stefan Fenz and Edgar R. Weippl, "Ontology-based IT-Security Planning," in Proceedings of the 12th Pacific Rim International Symposium on Dependable Computing, PRDC2006, 2006, pp. 389-390. BibTeX | PDF
  @INPROCEEDINGS{Fenz_OntologybasedITSecurityPlanning_2006,
  Author = {Stefan Fenz and {Edgar R.} Weippl},
  title = {Ontology-based IT-Security Planning},
  booktitle = {Proceedings of the 12th Pacific Rim International Symposium on Dependable Computing, PRDC2006},
  year = {2006},
  month = {12},
  abstract = {IT-security has become a much diversified field and small and medium sized enterprises (SMEs), in particular, do not have the financial ability to implement a holistic IT-security approach. We thus propose a security ontology, to provide a solid base for an applicable and holistic IT-security approach for SMEs, enabling low-cost risk management and threat analysis.},
  pdf = {2006 - Fenz - Ontology-based IT Security Planning.pdf},
  pages = {389-390},
  publisher = {IEEE Computer Society},
  note = {9353421},
  }
• A Min Tjoa and Stefan Fenz and Edgar R. Weippl and Markus Klemen and Andreas Ekelhart, "The Semantic Desktop: A Semantic Personal Information Management System based on RDF and Topic Maps," in Proceedings of the ODBIS Workshop, 31st International Conference on Very Large Data Bases (VLDB) 2005, 2005, pp. 135-151. BibTeX | PDF
  @INPROCEEDINGS{Weippl_SemanticDesktopSemantic_2005,
  Author = {{A Min} Tjoa and Stefan Fenz and {Edgar R.} Weippl and Markus Klemen and Andreas Ekelhart},
  sbahotlist = {true},
  title = {The Semantic Desktop: A Semantic Personal Information Management System based on RDF and Topic Maps},
  booktitle = {Proceedings of the ODBIS Workshop, 31st International Conference on Very Large Data Bases (VLDB) 2005},
  year = {2005},
  month = {10},
  pdf = {2005 - Weippl - The Semantic Desktop.pdf},
  number = {4623},
  pages = {135-151},
  }
• Edgar R. Weippl and Eva Gahleitner and Wernher Behrendt and Juergen Palkoska, "On Cooperatively Creating Dynamic Ontologies," in Proceedings of the 16th ACM Conference on Hypertext and Hypermedia, 2005. BibTeX
  @INPROCEEDINGS{Gahleitner_CooperativelyCreatingDynamic_2005,
  Author = {{Edgar R.} Weippl and Eva Gahleitner and Wernher Behrendt and Juergen Palkoska},
  sbahotlist = {true},
  title = {On Cooperatively Creating Dynamic Ontologies},
  booktitle = {Proceedings of the 16th ACM Conference on Hypertext and Hypermedia},
  year = {2005},
  month = {9},
  publisher = {ACM},
  }
• Edgar R. Weippl and Wolfgang Essmayr and Stefan Probst, "Role-Based Access Controls: Status, Dissemination, and Prospects for Generic Security Mechanisms," International Journal of Electronic Commerce Research, vol. 4, iss. 1, pp. 127-156, 2004. BibTeX | PDF
  @ARTICLE{weippl_ae,
  Author = {{Edgar R.} Weippl and Wolfgang Essmayr and Stefan Probst},
  title = {Role-Based Access Controls: Status, Dissemination, and Prospects for Generic Security Mechanisms},
  journal = {International Journal of Electronic Commerce Research},
  year = {2004},
  month = {1},
  pdf = {Papers/Weippl/ae_2002_essmayr.pdf},
  volume = {4},
  number = {1},
  pages = {127--156},
  publisher = {Kluwer},
  }

View all publications