SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies. Within a network of more than 70 companies, 15 Austrian and international universities and research institutions, and many additional international research partners we jointly work on research challenges ranging from organizational to technical security to strengthen Europe’s Cybersecurity capabilities.
ISIS @ TU Wien IAIK @ TU Graz DKE @ Uni Wien NM @ WU Wien FH St. Pölten AIT


Privacy not just a right but a duty

Casting one’s ballot is not just a right but a duty; one might argue that privacy protection requires a similar approach. Edgar Weippl in an interview with Factor.


ERCIM News No.107

The ERCIM News No. 107 has just been published at with a special theme “Machine Learning” (The issue is available in PDF here).

SBA Research contributed the article “Privacy Aware Machine Learning and the Right to be Forgotten” by Bernd Malle, Peter Kieseberg, Sebastian Schrittwieser, and Andreas Holzinger.

Technology Outlook Audimax ETH

Edgar Weippl explained why applied security research is important to solve today’s and future problems; Jan Camenisch (IBM Research) showed some of his fundamental work that later lead to his Advanced ERC Grant and Dirk Helbing (ETH Zurich) picked up on the topic of New Enlightenment and emphasized that we all need to work hard to keep the freedoms we take for granted.


Edgar Weippl ETH Zurich

Read the report: Report Technology Outlook

SBA Research @ ESORICS 2016

Today is the first day of the 21th European Symposium on Research in Computer Security (ESORICS 2016). Two of our researchers, Stefan Brunthaler and Johanna Ullrich, are attending; Johanna is presenting her paper on attacks exploiting Xen rate limits tomorrow. ESORICS 2016 takes place from 28-30 September 2016 in Heraklion, Crete, and is A-ranked according to the CORE ranking.

Masaryk University

As part of the colloquia programme Edgar Weippl gave a presentation on research methods for applied computer scecurity students.


SBA @ ASQT 2016

Last Friday our researcher Peter Kieseberg presented our work in the area of “Testing Algorithms in Sensitive Data Driven Research” and related security issues on the 14th installment of the “Anwenderkonferenz Softwarequalität, Test und Innovation” (ASQT 2016) at the Alpen-Adria-Universität Klagenfurt (University Klagenfurt).

Expert Discussion on Big Data

ADV organized an expert discussion on Big Data and Data Analytics jointly with the researchers from China. Edgar Weippl presented current and upcoming security and privacy challenges.

Adrian Dabrowski @ Report Verlag Panel Discussion

Adrian Dabrowski participated in the panel discussion „IT ist überall – Wie sicher ist unsere Infrastruktur?“ hosted by the Report Verlag that took place 13.09.2016. More information can be found here.

Tokyo Tech visits SBA

Students of Tokyo’s Institute of Technology visited SBA Research.
Tokyo Tech at SBA Research

Best Paper Award at ARES 2016

The paper “No Need for Black Chambers: Testing TLS in the E-mail Ecosystem at Large” has won the best paper award at ARES 2016. Congrats to our researchers Willi, Aaron, Martin and Markus!

You can find the paper here, our slides are openly available as well.

Bart Preneel @ Alpbach

Bart Preneel, member of SBA Research’s Scientific Board, talked about Cryptography to

Screen Shot 2016-09-05 at 19.59.24

ARES 2016

Today is the first day of the 11th International Conference on Availability, Reliability and Security (ARES 2016), which is hosted by the University of Applied Sciences Salzburg and SBA Research. The ARES 2016 Conference takes place from 31 August to 2 September 2016 in Salzburg, Austria.

We are welcoming 227 participants from 41 countries! At ARES 2016 35 full & short papers will be presented; 18 workshops, the CD-ARES 2016 and the ARES EU Symposium are co-located and in total we are welcoming 12 invited talks.


Salzburger Dialog

Salzburger Dialog is an annual event organized by Dr. Stefan Eder. Edgar Weippl gave a presentation on Cyber-Security and possible effects of the NIS directive.
2016-08-30 14.58.34

2nd NIST/SBA Workshop on Combinatorial Security Testing

The second joint workshop between NIST and SBA Research on combinatorial security testing was held at SBA Research, Vienna on August 4th, 2016.

The scope of the workshop was to strengthen the existing and already high successful cooperation between the Combinatorial Security Testing team of SBA Research and the ACTS project team of US NIST on the research field of combinatorial security testing.

The workshop was highly successful and paved the way for new applications of combinatorial security testing in cyber-physical systems, cryptography and web technologies, together with the advancement of methodologies for constructing optimal arrays and covering sequences.

For more information on the workshop’s agenda, see here.

TRUST 2016 Conference

Today is the last day of the 9th International Conference on Trust & Trustworthy Computing (TRUST 2016), which is hosted by SBA Research. We are welcoming Virgil D. Gligor (Carnegie Mellon University, UK) & Stefan Katzenbeisser (TU Darmstadt & CASED, Germany) as Keynote Speakers at TRUST 2016. The TRUST 2016 Conference takes place from 29-30 June 2016 in Vienna. Website

SBA at Alpbach – Breakout Session on Cyber-Security

Under the lead of TU Austria, we organize an Alpbach Breakout Session on Cyber-Security as a fundamental right. Participants include Isao Echizen (NII), Lokke Moerel (Tilburg University), Günter Müller (University of Freiburg), Reinhard Posch (TU Graz), Bart Preneel (University of Leuven), A Min Tjoa (TU Wien), and Edgar Weippl (TU Wien, SBA Research).

Find the summary of the results discussed in the breakout session here:
Alpbach Executive Summary

Mozilla Winter of Security

Klaus Krapfenbauer, one of SBA’s bright students, successfully finished his Winter of Security project at Mozilla.

As part of his master thesis he implemented a PoC for fully automated Let’s Encrypt support in nginx. Due to the design of nginx, this was not a straight forward task. You can read the technical details in the blogpost from Mozilla.

If you are interested in participating in this year’s Winter of Security, please contact Martin Schmiedecker.

Changwon National University visits SBA Research

Students from the Changwon National University of South Korea visited SBA Research.