SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
The team of the Technical University of Vienna “We_0wn_Y0u” could achieve victory at the iCTF 2011 under the direction of Adrian Dabrowski. In a very exciting, nine-hour competition against 85 international competing teams, also Martin Mulazzani, Peter Frühwirt and Manuel Leithner… Read More
“We have subjected the cloud solution from A1 to an architecture analysis and can confirm that the data in the A1 Austria Cloud are stored only on servers that are operated in Austria,” confirms Markus Klemen, CEO of Secure Business Austria Research. (mehr…)
A Bird’s-Eye View of Optimal Codes and Symmetric Cryptography from Combinatorial Designs Dimitris E. Simos, Department of Mathematics, National Technical University of Athens, Abstract: In the past few decades, combinatorial design theory has grown to encompass a wider variety of investigations, many… Read More
Clemens Kolbitsch recently finished his PhD supervised by Engin Kirda and Chris Kruegel. Tomorrow, he will present his paper “The Power of Procrastination: Detection and Mitigation of Execution-Stalling Malicious Code” at CCS 2011. Clemens will shortly join our partner company TLLOD.
We are going to present our social snapshot forensic tool at the Annual Computer Security Applications Conference (ACSAC) 2011. Abstract: Recently, academia and law enforcement alike have shown a strong demand for data that is collected from online social networks. In this work, we present a novel method for… Read More
On ARES’ last day, an informal workshop on research collaborations was held. Participants from Japan were Prof. Dr. Ryoichi Sasaki Tokyo Denki University, Prof. Dr. Noboru Sonehara, National Institute of Informatics, Prof. Dr. Isao Echizen, National Institute of Informatics, Dr. Sven Wohlgemuth, National Institute of Informatics.
In August we will present our work on cloud storage security at the 20th USENIX Security Symposium in San Francisco. The paper, in essence, outlines new attacks on cloud storage services that use server-side data deduplication. It includes a security analysis of Dropbox, a popular cloud storage service. By… Read More
Rails 3.0.5 doesn’t validate the input for the X-Forwarded-For field in the header sent by clients with a class C remote-addr. (see: TRUSTED_PROXIES). (Security Focus, more details…)
Alexander Schatten, senior researcher at SBA Research and Marco Reiser published an interesting article on "What programming at prompt level leads to". Where can AI systems really help programmers and is the approach taken here really new? This article takes a look at their role. ... ∞