SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
Researchers of SBA Research and the SecLab of the Vienna University of Technology participated successfully in the world’s most recognized capture the flag tournament at DEFCON 2012 in Las Vegas Following a tough qualification with hundreds of competing teams, our team “We_Own_You” made its way to the final round with… Read More
Edgar Weippl teaches at the summerschool in Cagliari. Other lecturers are Lorenzo Cavallaro, Royal Holloway, Univ. of London, Dawn Song, UC Berkeley, and Pierangela Samarati, University Milan (more…)
SBA organizes the ARES 20120 conference in Prague The ARES Conference Team: (from left to right) A Min Tjoa, Edgar Weippl, Yvonne Poul, Stefan Jakoubi, Simon Tjoa … Read More
12. Juli, 17:00 bei IBM – Architecture Circle Vienna in Wien. Thema: Wie sicher ist Mobile? Der Vortrag gibt Antworten auf brennende Fragen der Sicherheit von mobilen Endgeräten im Unternehmen. Wir werden beispielsweise der Frage nachgehen, ob diese Geräte überhaupt “managebar” sind. Die Devise “Bring your own device” ist… Read More
University of Freiburg together with Secure Business Austria is organizing a workshop on Emulation called “Towards Practical Emulation Tools and Strategies” on this years annual conference on the preservation of digital objects (iPres) to be held in Toronto, Canada in October. More information can be found on the workshop website… Read More
the BEST summer school on information security starts at the Vienna University of Technology. All lectures are held by researchers and professionals from SBA.
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. ∞