SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
German version below SBA Research experts use reverse engineering to analyze the Android version of the Red Cross Stop Corona app for data security. Technical statement on the analysis. The Stop Corona app of the Austrian Red Cross has been raising questions since it went online some… Read More
To close the gap between software development and security, the sec4dev conference and bootcamp offered knowledge transfer between developers and security experts. Two days bootcamp, followed by two days conference in the Audimax of the Vienna University of Technology: SBA Research had invited to a tightly packed program for… Read More
We are all asked to stay home for the time being. Invest your home office time in further educating yourself with the SBA Live Academy Be sure to join in! Tuesday – Thursday from 13:00 to… Read More
Stay secure during Home Office. Almost overnight, most companies had to severely limit physical access to their offices. As more and more employees start working from home, connecting to their company network infrastructure, security becomes an immediate concern. Keeping IT systems up and running has never been more important than… Read More
The current situation does come with certain upsides: “It may be an incentive to see that working from home can indeed work well. A correct set up of one´s home office environment plays a key role in preventing vulnerabilities and security incidents.” Be sure to read up on Edgar Weippls… Read More
Last Friday we managed to secure the 7th place at this years edition of iCTF with our SBA-supported CTF Team “We_0wn_Y0u” (w0y). The team is organized by SBA researchers and comprised of students/researchers/alumni of TU Wien. We had a great time playing this year.
Interview with ao. Prof. Kurt Matyas, Vice Rector for Studies and Teaching at the TU Wien. According to the (ISC)2 Cybersecurity Workforce Report about Women in Cybersecurity, published in 2019, women working in cybersecurity account for 24% of the overall workforce. A 2019 article in the… Read More
We are very happy to welcome participants from the ÖFG ArGe Digitale Transformation for their Kick-Off Meeting. The main focus will be on resilience. On the 2nd day, members of the OCG Working Group on Sustainability and Computing will contribute to the discussion during a joint… Read More
A big thanks to all for participating in the sec4dev conference and bootcamp 2020! Due to the constantly growing number of participants at sec4dev and the great interest in our regular security MeetUps, we now reach more than 600 experts, and the trend is rising. Only through the… Read More
A big thanks to our funny folks at SBA Research, eating “Krapfen” and wearing costumes! Meet: Billy the Kid, the SBA Unicorn, our spanish dancer, Ms. Lady Luck, Leia Organa and Captain Kirk in a bathrobe.
Together with sipgate and ISMK Stralsund, Gabriel Gegenhuber, researcher at SBA Research and University of Vienna, and Michael Pucher, researcher at SBA research, discovered and investigated a vulnerability in the Voice of LTE (VoLTE) stack that is broadly used within MediaTek-based smartphones. ∞
In the Mediatek modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. ∞