Floragasse 7 – 5th floor, 1040 Vienna
Subscribe to our Newsletter

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Tag: Highlights

Shellshock a.k.a. Bashbleed

What is Shellshock? On 24/09/2014, a security vulnerability was published as CVE-2014-6271 (also Shellshock or Bashbleed). The vulnerability is in the command line software bash which is used in practically all Linux systems as the default shell. Due to an error when parsing environment variables, it is possible to execute… Read More

This was ARES 2014!

ARES 2014 was held from 8 – 12 September 2014 in Fribourg, Switzerland. Thanks to 133 participants from 30 countries for participating! ARES 2014 Opening Welcome Reception Keynote Bart Preneel Tiny Train through Fribourg ARES 2014 participants… Read More

Keynote at SECRYPT 2014

Edgar Weippl gives a keynote on Advanced Persistent Threats & Social Engineering at the 11th International Conference on Security and Cryptography (SECRYPT 2014), wich takes place from 28 – 30 August 2014 in Vienna.

Keynote at CRISIS 2014

Edgar Weippl gives a keynote on Empirical and Applied Research in Information Security at the CRISIS 2014 conference in Trento.

SBA Research @ USENIX

Adrian Dabrowski, Martina Lindorfer and Johanna Ullrich visited the flagship conference Usenix Security Symposium, held from 20-22 August in San Diego, California. As usual, the conference hosted a variety of interesting talks covering a vast amont of different aspects in computer security. Johanna presented her paper on IPv6 Security at… Read More

TechCamp Summer School

Edgar Weippl gave the opening lecture of the TechCamp Summer School that is organized in cooperation with the Vienna University of Technology and our partner company LBS, funded by the European Union. The TechCamp takes place from 19 – 28 August, 2014 at the Vienna University of Technology. 30 students… Read More

“Make sure you have all the updates; make sure you use a browser that is not standard; and pursue more training—talk about the threat.”

Engin Kirda et al. analyzed nearly 1,500 suspicious e-mail messages targeting a human-rights NGO. “The team found that, while the malware managed to reliably evade detection by many antivirus programs, the attacks were relatively unsophisticated, using known vulnerabilities that had already been patched.” Read the whole article here. The paper will be presented… Read More