SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
Since our entire working life runs on software, security is essential for almost every business operation; what is more, customer trust largely depends on whether security incidents happen and if so, how they are handled. To strongly root security in your company culture. Read the full article on the concept… Read More
Congratulations to Dimitris E. Simos (Key Researcher at SBA Research) for completing his Habilitation at Graz University of Technology. As of Jan.1st 2021, Dimitris is now Associate Professor (non-tenured track, venia docendi for Applied Computer Science) with… Read More
Congratulations to Stefanie Rinderle-Ma (Key Researcher at SBA Research) for joining the Technical University of Munich as of February 1st. She takes over the newly created Chair for Information Systems and Business Process Management. Read More
Our second newsletter was sent out today. Check it out here! We introduce you to ISIS, our (I)IoT, Systems and Industrial Security Group. In our video we highlight their research in areas such as side-channel attacks, automating security risk assessments or injecting security features in firmware post… Read More
Today is Safer Internet Day! To support our partners and customers, we have compiled our Home Office top tips for employees and for organizations for keeping their IT infrastructure secure and available. Stay secure during Home Office! Security Tips for Home Office SBA Live Academy on YouTube:… Read More
From Bad-Cop Culture to Sustainable Security Integration Since our entire working life runs on software, security is essential for almost every business operation; what is more, customer trust largely depends on whether security incidents happen and if so, how they are handled. To strongly root security in your company culture,… Read More
SBA’s paper “On the Usability of Authenticity Checks for Hardware Security Tokens” by Katharina Pfeffer, Alexandra Mai, Adrian Dabrowski, Matthias Gusenbauer, Philipp Schindler, Edgar Weippl, Michael… Read More
Edgar Weippl (SBA Research) co-organizes a new Dagstuhl seminar Digital Twins for Cyber-Physical Systems Security at the distinguished Schloss Dagstuhl – Leibniz-Zentrum für Informatik. This Dagstuhl seminar aims to provide insights into the opportunities and limitations of the digital-twin concept for CPS… Read More
Christian Kudera (SBA Research) recently gave an interview on smart-lock systems to Kurier, in which he focuses on their functionality and security. Smart-lock systems use digital code as a key. They are locked and unlocked with the smartphone via app. Read… Read More
The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. ∞
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞