SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
Ulrich Bayer spricht am 30.01.2013 über “Softwaresicherheit” bei der CON.ECT Informunity Veranstaltung zum Thema “Sicherheitsmanagement und sichere Webapplikationen”. Nähere Infos hier.
Sebastian Schrittwieser presented a talk on ethics in computer security research at the Chaos Communication Congress (29c3) in Hamburg. You can watch the recording on Youtube. Read More
Journal of Universal Computer Science (J.UCS) This special issue aims at a full and detailed discussion of the research issues of security as an integrative concept that covers amongst others availability, safety, confidentiality, integrity, maintainability and security in the different fields of applications. (Call for Papers)… Read More
Towards a Secure DNS (Dec 13, 2pm, SBA) Most caching DNS resolvers still rely for their security, against poisoning, on validating that the DNS responses contain some ‘unpredictable’ values, copied from the request. These values include the 16 bit identifier field, and other fields, randomised and validated by different… Read More
Heute fand das zweite Kamingespräch bei SBA Research zum Thema “Wissen und Prozesse in Unternehmen” statt. Ziel dieser neuen, sehr klein gehaltenen Veranstaltungsreihe ist es, bestehende Partner untereinander noch besser zu vernetzen, um neue Ideen, Konzepte und Projekte zu generieren und die Netzwerke der Partner zu erweitern. Zum Dezember-Kamingespräch durften… Read More
The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. ∞
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞