SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
Adrian Dabrowski gives a talk about “Browser History Stealing with Captive Wi-Fi Portals” at the Mobile Security Technologies (MoST) 2016, held as part of the IEEE Computer Society Security and Privacy Workshops, in conjunction with the IEEE Symposium on Security and Privacy in San José. Read More
We are proud to announce that the ITEA2-action DIAMONDS where SBA Research participated through the MobseTip project received the prestigious EUREKA-award. For more information on relevant project aspects please contact Dimitris Simos.
Damjan Buhov presents today our paper “Pin It! Improving Android Network Security At Runtime” (by Damjan Buhov, Markus Huber, Georg Merzdovnik, and Edgar Weippl) at the IFIP Networking 2016 Conference. IFIP Networking is a CORE A-ranked conference. Read More
Aaron Zauner, one of our researchers, has gotten a talk accepted at Blackhat USA 2016. Together with Sean Devlin, Hanno Böck and Philipp Jovanovic they identified a nonce re-use attack in the TLS GCM modes that can be used to inject additional content in the worst case. Overall, they identified… Read More
Dimitris Simos gives a talk on May, 11th about “Combinatorial Coverage Analysis of Subsets of the TLS Cipher Suite Registry” joint work with Kristoffer Kleine (SBA Research), Rick Kuhn (NIST), Raghu Kacker (NIST). HCSS 2016 takes place from May 10th to May 12th in Annapolis,… Read More
ERCIM News No. 106 (July 2016) DEADLINE FOR CONTRIBUTIONS: Tuesday 17 May 2016 Please read the guidelines below before submitting an article The Special Theme and the Research and Innovation sections contain articles presenting a panorama of European research activities. The Special Theme focuses on a sector which has… Read More
Recently there were numerous papers on browser fingerprinting i.e. measuring the entropy of browser configurations to make them uniquely stand out among all others. Usually these methods run analysis on UserAgent strings, canvas fingerprinting, system fonts or the installed plugins. SBA Research has now setup its own fingerprinting website, which… Read More
Researchers from SBA Research are presenting these days at the Linuxwochen Wien 2016: Today at 3:30pm, Katharina Krombholz will present the findings of the user study on security and privacy in Bitcoin. On Saturday, 12am Martin Schmiedecker will talk about digital forensics on Linux and recently published tools that… Read More
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. ∞