SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
Our colleague Markus Maier, Researcher at SBA Research and University of Vienna Research Group Security and Privacy, gave a talk on “In the Loop: An overview of Persistent Routing Loops on the IPv6 (and IPv4) internet” at the LACNIC43 conference in Sao Paulo, Brasil. ... Read More
For over 25 years, Infraprotect has supported companies in the fields of crisis, emergency, risk, and security management, as well as crisis communication and R&D. The company provides tailored crisis management solutions to clients from a variety of sectors, including manufacturing, critical infrastructure, and public services. Read More
In 2025, the Austrian Computer Society (OCG) once again recognizes outstanding academic work in the fields of Computer Science and Business Informatics with the OCG Förderpreis and the OCG Förderpreis-FH. This year’s OCG Förderpreis goes to our research colleague Daryna Oliynyk for… Read More
Our colleague Rudolf Mayer, senior researcher at SBA Research, gave a talk at the 2025 dHealth conference organised in Schönbrunn, Vienna, Austria. ... Read More
In early April, we held a company-wide internal kick-off for our SBA-K1 NGC – Next Generation Cybersecurity COMET program, marking the beginning of an exciting new chapter for our research center. After months of preparation and collaboration, our team started the first COMET NGC phase, setting the stage for… Read More
In April 2025, the paper "Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks", authored by Daryna Oliynyk, Rudolf Mayer, and Andreas Rauber, was presented at the IEEE Conference on Secure and Trustworthy Machine Learning (SaTML). ... Read More
Bluetooth Low Energy is one of the most widely used protocols used in Internet of Things (IoT) and multimedia devices. Security issues in these applications are prone to affect a significant number of end users and companies alike. In their latest work applying the Combinatorial Security Testing (CST) approach… Read More
The research on Combinatorial Security Testing (CST) by the MATRIS group of SBA Research is amongst the top five nominations for the Houska prize, Austria's largest private award for application-oriented research, in the category non-university research. ... Read More
The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. ∞
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞