SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
The Team “We_0wn_Y0u”, consisting of members of iseclab and SBA Research, has won the second place in the iCTF which took place last Friday (see scoreboard). “Critial infrastructure” was the theme, and the scenario was completely different to previous years. In total, nine services had to be attacked and defended… Read More
In an advertisement of bmvit and FFG in the newspaper “Heute” Katharina’s internship is listed as a successful example for the promotion of women. Subsequent to the internship her employment continued on a permanent basis and she began working on her dissertation. Within the cooperation with the NII Katharina is… Read More
Sebastian Schrittwieser presented a talk on ethics in computer security research at the Chaos Communication Congress (29c3) in Hamburg. You can watch the recording on Youtube. Read More
Towards a Secure DNS (Dec 13, 2pm, SBA) Most caching DNS resolvers still rely for their security, against poisoning, on validating that the DNS responses contain some ‘unpredictable’ values, copied from the request. These values include the 16 bit identifier field, and other fields, randomised and validated by different… Read More
The last FemTech internships were very successful. The work of Katharina Krombholz led to a journal publication (‘Fake Identities in Social Media – A case study on the sustainability of the Facebook business model’) which was adopted by Springer Journal of Service Science Research.
On 09/11/2012 SBA Research presents at the IT-SeCX an der FH St. Pölten. at FH St. Pölten. Sebastian Schrittwieser talks about “WhatsApp and Co.: Attack Vectors in Smartphone Messengers”. … Read More
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. ∞