SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
Smarty 3.1.32 or below is prone to a path traversal vulnerability due to insufficient sanitization of code in Smarty templates. This allows attackers controlling the Smarty template to bypass the trusted directory security restriction and read arbitrary files. We recommend to update Smarty to version 3.1.33 or later. For further details, see the full security advisory. Read More
After Srdjan Capkun’s opening keynote on ‘Secure Positioning and Location-Based Security’ and Bart Preneel’s presentation on ‘Challenges for Embedded Cryptography’, Edgar Weippl gave his invited talk on “Distributed Ledger Technology, Blockchain & Crypto Currencies – Hype & an Opportunity for Interdisciplinary Research” at the Cryptacus Conference. Read More
The workshop entitled “Domain specific extensions for machine-actionable Data Management Plans” was held during the 22nd International Conference on Theory and Practice of Digital Libraries in Porto, Porugal. In the workshop participants focused on the common data model for machine-actionable DMPs and seek to identify which domain specific extensions must be implemented… Read More
Today, at the 2nd IMA Conference on Theoretical and Computational Discrete Mathematics [IMA], Bernhard Garn gives a talk titled ‘Algebraic Techniques for Covering Arrays and Related Structures’ (joint work with Dimitris Simos). The conference showcases theoretical and computational advances in the general field of discrete mathematics. [IMA] https://ima.org.uk/7775/2nd-ima-conference-theoretical-computational-discrete-mathematics/
Tomasz Miksa presented a paper entitled “Research Data Preservation Using Process Engines and Machine-Actionable Data Management Plans” at the 22nd International Conference on Theory and Practice of Digital Libraries (TPDL 2018) which was held 10-13 September in Porto, Portugal. The paper demonstrates how systems used for managing data during research… Read More
Yesterday, Nicholas Stifter presented their paper: Johanna Ullrich, Nicholas Stifter, Aljosha Judmayer, Adrian Dabrowski and Edgar Weippl, “Proof-of-Blackouts? How Proof-of-Work Cryptocurrencies Could Affect Power Grids” at RAID 2018 in Heraklion, Crete The paper analyzes the potential impact cryptocurrency mining and its large power consumption could have on the reliable operation… Read More
Photo by Atilla Elçi The morning session started with Edgar’s Opening Keynote on Distributed Ledger Technology, Blockchain & Crypto Currencies. The topic is not only a hype area but also well-suited for graduate students to start with focused research. In the presentation Edgar showed three aspects that are… Read More
Aljosha Judmayer will be presenting his full paper at CBT 2018 in Barcelona: Aljosha Judmayer, Nicholas Stifter, Philipp Schindler and Edgar Weippl. “Enforcing rule changes through offensive forking- and consensus techniques” Full paper Moreover Alexei Zamyatin had his poster accepted at the CBT´18 workshop, held as part as… Read More
With a total of 308 participants from over 50 countries this year´s ARES & CD-MAKE broke all previous records. An acceptance rate of 22,3% along with 18 workshops, 6 of them held within the EU Projects Symposium, and 14 keynote speakers reflect the obtained success and impact. In proper ARES… Read More
A group of dedicated young researchers presented their work at the 22st ICT Security Conference on 16 and 17 September 2026, which was organized by the Austrian Armed Forces. ∞
A new paper, “Automated Reasoning for Indistinguishability in the CCSA,” co-authored by Laura Kovács, key researcher at SBA Research and full professor at the Faculty of Informatics of the Vienna University of Technology (TU Wien), and Matteo Maffei, key researcher at SBA Research and Professor at TU Wien, has been accepted for presentation at the 33rd ACM Conference on Computer and Communications Security (CCS). ∞
The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. ∞