SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
We are going to present our social snapshot forensic tool at the Annual Computer Security Applications Conference (ACSAC) 2011. Abstract: Recently, academia and law enforcement alike have shown a strong demand for data that is collected from online social networks. In this work, we present a novel method for… Read More
Der Consultants Competence Circle ist eine Expertendiskussion zu aktuellen Themen aus Wirtschaft und Beratung. Edgar Weippl präsentiert Herausforderungen im Bereich der Informationssicherheit im Rahmen der Expertendiskussion. 29.8., 18 Uhr, Schloss Hunyadi, Schlossgasse 6, Maria Enzersdorf. Veranstaltet von der WKO-NÖ / UBIT.
On ARES’ last day, an informal workshop on research collaborations was held. Participants from Japan were Prof. Dr. Ryoichi Sasaki Tokyo Denki University, Prof. Dr. Noboru Sonehara, National Institute of Informatics, Prof. Dr. Isao Echizen, National Institute of Informatics, Dr. Sven Wohlgemuth, National Institute of Informatics.
Usenix Security 2011: Dark Clouds on the Horizon: Using Cloud Storage as Attack Vector and Online Slack Space Abstract Full paper Video reports on Computerworld, Diogo’s blog, more blogs.
The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. ∞
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞