SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
What is Shellshock? On 24/09/2014, a security vulnerability was published as CVE-2014-6271 (also Shellshock or Bashbleed). The vulnerability is in the command line software bash which is used in practically all Linux systems as the default shell. Due to an error when parsing environment variables, it is possible to execute… Read More
ARES 2014 was held from 8 – 12 September 2014 in Fribourg, Switzerland. Thanks to 133 participants from 30 countries for participating! ARES 2014 Opening Welcome Reception Keynote Bart Preneel Tiny Train through Fribourg ARES 2014 participants… Read More
Edgar Weippl gives a keynote on Advanced Persistent Threats & Social Engineering at the 11th International Conference on Security and Cryptography (SECRYPT 2014), wich takes place from 28 – 30 August 2014 in Vienna.
Adrian Dabrowski, Martina Lindorfer and Johanna Ullrich visited the flagship conference Usenix Security Symposium, held from 20-22 August in San Diego, California. As usual, the conference hosted a variety of interesting talks covering a vast amont of different aspects in computer security. Johanna presented her paper on IPv6 Security at… Read More
Edgar Weippl gave the opening lecture of the TechCamp Summer School that is organized in cooperation with the Vienna University of Technology and our partner company LBS, funded by the European Union. The TechCamp takes place from 19 – 28 August, 2014 at the Vienna University of Technology. 30 students… Read More
Engin Kirda et al. analyzed nearly 1,500 suspicious e-mail messages targeting a human-rights NGO. “The team found that, while the malware managed to reliably evade detection by many antivirus programs, the attacks were relatively unsophisticated, using known vulnerabilities that had already been patched.” Read the whole article here. The paper will be presented… Read More
Our colleague Sebastian Raubitzek, researcher at SBA Research and a member of the Security and Privacy Research Group at the University of Vienna, has published a journal article titled Classification of Obfuscation Techniques in LLVM IR: Machine Learning on Vector Representations in MDPI's journal Machine Learning and Knowledge Extraction. ... ∞