SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
are now online: http://dx.doi.org/10.1007/978-3-642-30921-2 Trust and Trustworthy Computing, 5th International Conference, TRUST 2012, Vienna, Austria, June 13-15, 2012. Proceedings Stefan Katzenbeisser, Edgar Weippl, L. Jean Camp, Melanie Volkamer, Mike Reiter and Xinwen Zhang
Gemeinsam mit dem Partnerunternehmen Thales war SBA Research beim Österreichischen Sicherheitskongress mit einer großen Demo-Installation vor Ort. Read More
Heute findet bei SBA Research in Kooperation mit dem Institut für interaktive Systeme und Softwaretechnik der TU Wien ein Workshop zur Datensicherheit in der Medizin statt.
In JR Center for „User-friendly Secure Mobile Environments“ deals with security aspects in current and future mobile applications – e.g., credit and debit card functionalities, cash transactions or (un)locking doors. Center director is Priv.-Doz. DI Dr. René Mayrhofer; the center located at the FH Oberösterreich. Company Partners are: A1 Telekom… Read More
Low Tech Hacking, Jack Wiles, Terry Gudaitis, Jennifer Jabbusch, Russ Rogers, Sean Lowther (authors). Review by Manuel Leithner and Edgar Weippl. “Penetration testing, be it internal or external, is one of today’s most common and useful tools for auditing the security of any organization’s IT infrastructure.” (more…) … Read More
Our Research Report 2012 is out. On more than 70 pages you can find all information about our research center, our research areas, our partners and much more!
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. ∞