Floragasse 7 – 5th floor, 1040 Vienna
Subscribe to our Newsletter

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

IMPACT 2025
14.10.2025
SBA @ Embedded Austria No. 5: Security – Regulations, Norms and Tooling
14.10.2025
Shecurity & SHE@ISACA
17.10.2025

Recent News:

Talk at CCC

Ange Albertini will give a talk on Funky File Formats at 31c3 that touches nicely on Adrian’s paper on QR inception (Twitter). Read More

P3F-Projekt im Standard

“Weitaus ernsthafter ist ein Projekt der Wiener IT-Sicherheitsexperten Katharina Krombholz und Adrian Dabrowski. Sie wollen mit dem “P3F”-Projekt das Problem der “analogen Lücke” lösen. … Krombholz und Dabrowski haben schon Kontakte zu großen IT-Konzernen aufgenommen und ihr Projekt beispielsweise bei Facebook vorgestellt.” derStandard.at

Researchers and security testers of SBA Research found a RXSS vulnerability at W3C online tidy services via combinatorial testing

Dimitris Simos, Bernhard Garn of the research team and Severin Winkler, Peter Aufner, Andreas Bernauer of the security testing team of SBA Research found a RXSS vulnerability in W3C online tidy services using combinatorial testing methodologies and demonstrated its applicability to web application security testing. These novel research methods have… Read More

Adrian Dabrowski: Best Student Paper Award – ACSAC 2014

Adrian Dabrwoski received the award for the best student paper at ACSAC 2014 for his paper. You can find a preprint here. Adrian Dabrowski, Nicola Pianta, Thomas Klepp, Martin Mulazzani, and Edgar Weippl. Imsi-Catch Me If You Can: Imsi-Catcher-Catchers. In Proceedings of the 30th Annual Computer Security Applications Conference… Read More

Cyberangriff: Unternehmen und Behörden proben Ernstfall

‘Edgar Weippl, Wissenschaftlicher Leiter des Wiener Forschungsinstituts für Informationssicherheit SBA Research lobt den Ansatz des Planspiels: “Der Schwerpunkt auf Optimierung der Kommunikation zwischen den Akteuren ist positiv zu betrachten…”‘ (futurezone)

Markus Klemen @ (ISC)2 Security Congress EMEA 2014

Markus Klemen was invited to participate as panelist in the inagurate (ISC)2 Security Congress EMEA 2014, which took place from 9th to 10th of December 2014 in London, UK. The Panel was about “Educating the Future: What Can Employers be Doing?”. (ISC)2 is the global, not-for-profit leader in educating and certifying information security professionals throughout… Read More

Safer Six – IPv6 Security in a Nutshell @ DeepSec 2014

Johanna Ullrich has held a presentation on IPv6 at DeepSec – a conference bringing together security professionals from academics, government, industry, and the hacking community in Vienna. Her talk encompassed an introduction to IPv6, current security and privacy vulnerabilities as well countermeasures, and based on SBA’s paper at WOOT’14… Read More

Digital Discourse – Insights into Lived Participation

“That would have never occurred to experts.” – Opportunities and Limits of Digital Citizen Participation Today the event “Digital Discourse | Insights into Lived Participation”, supported by SBA Research and organized by Liquid Participation, took place. What expectations are linked to participatory online processes? How is the process design for… Read More