SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
“Oft sind es erstaunlich simple Sicherheitslücken, die im Internet für Datenklau-Attacken ausgenützt werden.” (Gastkommentar Edgar Weippl, Wiener Zeitung)
Manuel Leitner is holding a lesson about UCC Privacy & Security in cooperation with CON.ECT. The talk is centered on multidimensional communication including audio, video, text and files. Threats endangering the privacy of the transmitted data are shown and defense strategies are presented in this talk.
Internetsicherheit, Hacker und Datenschutz Der weltweite freie Datenverkehr hat auch seine Schattenseiten: Unbekümmerte Internetuser gehen viel zu unvorsichtig mit ihren Daten um, wichtige Webseiten weisen oft ernste Schwachstellen auf, Hacker finden immer wieder neue Methoden, in Computersysteme einzudringen. Edgar Weippl (Institut für Softwaretechnik und Interaktive Systeme, TU… Read More
A Bird’s-Eye View of Optimal Codes and Symmetric Cryptography from Combinatorial Designs Dimitris E. Simos, Department of Mathematics, National Technical University of Athens, Abstract: In the past few decades, combinatorial design theory has grown to encompass a wider variety of investigations, many… Read More
Ulrich Bayer did hold a lesson on secure development of web applications at the “IKT-Zentren Akademie” of 2011. The talk included a theoretical and practical introduction to secure web application development and the most common attack vectors. (mehr…)
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. ∞