SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
On 28/11/2013, during “EPILOG Wintersemester 2013” at the Technical University of Vienna, Adrian Dabrowski was awarded the “Diploma Thesis Award sponsored by IEEE Austria Section” for his thesis “Security Analysis of Metropolitan Locking Systems Using the Example of the City of Vienna”. Read More
Edgar Weippl gave the opening keynote at this year’s SIN conference in Turkey on “Social Engineering Attacks on the Knowledge Worker and the Digital Native”. Together with Bart Preneel and Josef Pieprzyk, Edgar was on a panel discussion organized by Ali Aydin Selcuk. … Read More
Vom 19. – 21. März 2014 findet die Fachtagung des Fachbereichs ”Sicherheit – Schutz und Zuverlässigkeit” der Gesellschaft für Informatik, die GI Sicherheit 2014 an der TU Wien statt, die von SBA Research gemeinsam mit Stefan Katzenbeisser, TU Darmstadt & CASED und in Kooperation mit der Österreichischen Computer Gesellschaft (OCG) ausgerichtet… Read More
Nov 21, 09.00-12.00 @ SBA Software security is becoming increasingly important due to numerous emerging threats exploiting software vulnerabilities. This course begins with a broad overview of various software security threats and some of the most effective countermeasures used to thwart them. More specifically, software practitioners will learn how to… Read More
The awareness of information security and IT compliance has increased considerably in the recent past. SBA Research takes this into account and expands its range of services. On 14/11/2013, we welcomed about 50 interested partners at the event “SBA lädt ein – Secure Your Business” and introduced our new department… Read More
Cryptography for the Next Generation Cloud, Daniel Slamanig, Graz University of Technology, 8010 Graz, Austria As is common practice in research, many new cryptographic techniques have been developed to tackle either a theoretical question orforeseeing a soon to become reality application. Cloud computing is one of these new areas, where new… Read More
New Privacy-Preserving Proxy-Type Signature Schemes, Christian Hanser, Graz University of Technology, 8010 Graz, Austria In this talk, we present two new proxy type signature schemes, which, in contrast to conventional proxy signature schemes, hide the delegated message space from outsiders. In short, proxy signature schemes allow an originator to delegate signing rights for messages out of… Read More
The external professors were Stefan Katzenbeisser (TU Darmstadt) and Engin Kirda (Northeastern Univ., Boston). Advisors were Edgar Weippl and A Min Tjoa.
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. ∞