SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
We are attending the IEEE International Conference on Systems and present our latest research results regarding pseudonymization. We received the best paper award for the paper “Technologies for the Pseudonymization of Medical Data: A Legal Evaluation”. Read More
We took the second place with the project Secure 2.0 (FIT-IT) in this year’s FIT-IT awards. Secure 2.0 ———– Secure 2.0 project aims to secure the Information Sharing on social networks for individuals by proposing an innovative machine learning technique for analysis of big social data. Read More
Our paper “Ontological mapping of information security best-practice guidelines” has been accepted at the 12th International Conference on Business Information Systems.
15th of January 2009 10:00 at Secure Business Austria: “Understanding the perpetration of employee computer crime in the organizational context” 16th of January 2009 15:00 at Secure Business Austria: “Motivations for employee computer crime in the organizational context”
Our paper “Formalizing Information Security Knowledge” has been accepted at the ACM Symposium on Information, Computer and Communications Security 2009 (Project Details).
The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. ∞
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞