ISEC TU GRAZ

1 Jan 2025

Hi there, it's nice to meet you! WE ARE ISEC: The Institute of Information Security at #TUGraz. We're here to share news and insights into our cybersecurity research and inform you about upcoming events at/around the institute. #cybersecurity #ISEC

Stefan Mangard is "Österreicher des Jahres" (Austrian of the Year)! 🎉 He received the award from Die Presse in the research category for exceptional work in hardware and cybersecurity. photos: Roland Rudolph

diepresse.comDie Österreicher des Jahres 2026 stehen festAustria 26: In acht Kategorien wurden am Donnerstagabend in Wien Persönlichkeiten ausgezeichnet, die in ihrem Bereich Außergewöhnliches leisten. Und noch etwas: 2026 gab es bei der Austria eine...

www.diepresse.com/41382809/die... The award ceremony will be broadcast on ORF2 on October 26 at 16:30.

ISEC Researchers Florian Draschbacher and Sudheendra Raghav Neela went to #ESORICS 2026 in Rome, Italy, to present their research! #android #security #amd #sidechannel

Sudheendra presented "A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP", showing that AMD's QoS resource-control extensions (meant to isolate "noisy neighbor" workloads) create new side channels...

snee.laA Cat with an MBA: How AMD QoS Features Enable Side Channels on SEV-SNPForeword This blog post is a summarized and introductory write up of our paper recently accepted at ESORICS 2026 to be presented in Rome, Italy between September 14-16, 2026: “A Systematic Look at Qua...

...on AMD SEV-SNP confidential VMs, mounting RSA attacks and keystroke-timing attacks, website fingerprinting, and an amplified cache covert channel with a malicious hypervisor. 📑A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP: snee.la/posts/amd-qo...

ISEC Researchers Florian Draschbacher and Sudheendra Raghav Neela went to #ESORICS 2026 in Rome, Italy, to present their research! #android #security #amd #sidechannel

Florian presented "Clone2Pwn: A Systematic Security Analysis of Data Migration Tools in the Android Ecosystem", in which they found severe security flaws in phone data migration tools from 7 major Android vendors (12B+ downloads),...

floriandraschbacher.comfloriandraschbacher.com

...letting nearby attackers eavesdrop on (or even inject) sensitive user data during transfers. 8 CVEs (so far!) and 5 high-severity. 📑 Clone2Pwn: A Systematic Security Analysis of Data Migration Tools in the Android Ecosystem: floriandraschbacher.com/papers/esori...

Did you have a good time at the Bachelor@ISEC event last week? 🍕💚 Again: Congratulations to all award winners!! 🏆🎉 And we hope everyone who was searching found interesting topics for their thesis! We also (finally) congratulated LosFuzzys on their 12th birthday. 😆

We’d like to introduce two new master courses this winter semester: AI Security and Privacy | SE & Deep Dive in Multiparty Computation | VU Find all our courses here: www.isec.tugraz.at/teaching

Deep Dive in Multiparty Computation: Multiparty Computation (MPC) is the cryptographic techniques that allow mutually distrustful parties to jointly compute on their private data while revealing nothing beyond the result.

In this two-week (30/11 to 11/12) intensive course, we go from the formal foundations to the state-of-the-art protocols underlying real-world applications such as threshold signatures and privacy-preserving ML.

We’d like to introduce two new master courses this winter semester: AI Security and Privacy | SE & Deep Dive in Multiparty Computation | VU Find all our courses here: www.isec.tugraz.at/teaching

In this seminar, you will explore an assigned topic from areas such as deepfake detection, prompt injection, or strategies for detecting hidden backdoors in neural networks.

You will review recent research, systematically categorize and compare existing approaches, and gain experience in literature research, scientific writing, and presenting research.

We’d like to introduce two new master courses this winter semester: AI Security and Privacy | SE & Deep Dive in Multiparty Computation | VU Find all our courses here: www.isec.tugraz.at/teaching

AI Security and Privacy: AI Security is becoming increasingly important as AI is deployed in critical parts of our modern infrastructure.

On Monday, at the Master@ISEC Welcome Event, we extended a warm welcome to the new master's students joining our campus! We gave an overview of the Major in Information Security + all our master's courses. And then, with a snack in hand, the students were free to meet our lecturers & each other. 😆

Reminder: Don't miss our event on Monday! 😎

ISEC TU GRAZ@isec-tugraz.bsky.social

Are you interested in/already doing the Major in Information Security at TU Graz? Join us for our Master@ISEC Welcome Event! 📅 October 5th | 17:00 📍 ISEC, Sandgasse 38A Whether you've just started or are heading to the end of your studies, anyone is welcome! www.isec.tugraz.at/event/master...

This was VSTTE & FMCAD’26 in Graz this year! We hosted the co-located conferences at our Inffeldgasse campus, with five days full of tutorials, paper presentations, poster sessions, and informative talks by invited speakers. We hope you had a great conference experience. 😊 fmcad.org/FMCAD26

futurezone.atGrazer Forscher finden Sicherheitslücke in Windows, Linux, Android und macOSMehrere Betriebssysteme sind von einer Schwachstelle betroffen, die das Ausspähen von Nutzerinformationen ermöglicht.

Grazer Forscher finden Sicherheitslücke in Windows, Linux, Android und macOS futurezone.at/digital-life...

Not sure what topic to choose for your thesis? Join us on Friday, Oct 9th! 🍕 At the Bachelor@ISEC event, we present new open bachelor’s thesis topics and award prizes to excellent students! 📅 October 9th 2026, 12:00 📍 ISEC, Sandgasse 38A more info 👇 www.isec.tugraz.at/event/bachel...

The event will also be the kick-off lecture in Introduction to Scientific Working (ISW), where you can choose your preferred topic!

‼️We are aware of the conflict with the Design and Analysis of Algorithms (DAA) exercise. If your DAA exercise group overlaps with Bachelor@ISEC, you may attend a different exercise group that day. Please inform the DAA exercise team in advance!

🏆 THE AWARDS 🏆 ISEC Student Research Excellence Award: Students at ISEC who became co-authors of a scientific publication in the context of a thesis or project receive this award.

isec.tugraz.atStudent Awards and Scholarships – ISEC

ISEC Bachelor Excellence Award: This award is for students majoring in “Information Security” at TU Graz who have completed their bachelor’s degree with distinction at TU Graz. Application deadline: Oct 7th 2026! www.isec.tugraz.at/student-awar...

File-Notification Systems Leave Windows, Linux, Android & macOS Vulnerable: Our researchers have demonstrated that file notification systems of various operating systems can be exploited to spy on users' activities and forge password prompts. Check it out ⬇️ inoti.fyi www.tugraz.at/en/news/arti...

theregister.comDecades-old file security flaws found in Android, Linux, macOS, and WindowsSecurity researchers report that Microsoft considers the side-channel leak of file events to be by design

Decades-old file security flaws found in Android, Linux, macOS, and Windows by @snee.la et al. www.theregister.com/security/202...

on.orf.atKI versuchte offenbar Zugriff auf geschützte Website - Steiermark heute vom 24.09.2026Kritik an neuer Spritpreisbremse wächst | Zahlreiche Urlauber-Beschwerden aus dem Sommer | KI versuchte offenbar Zugriff auf geschützte Website | Cobra-Beamter wegen Mordes angeklagt | Gregoritsch ers...

Check out this interview with Phillip Rieger by "Steiermark heute" 🙂 on.orf.at/video/143407...

21 Sept

Stefan Mangard, the head of our institute, got nominated by Die Presse for the Austria 26, an award for Austrian of the Year in a specific field. He got nominated in the research category. 👇 Vote now! www.diepresse.com/events/austr... (photo: Lunghammer - TU Graz)

17 Sept

🎉 Congratulations to Gerald Palfinger! 🎉 He successfully defended his #PhD thesis “Subverting Isolation Techniques using Automated Detection Methods”! 🎉 We’re sending him our best wishes for an amazing future ahead!

oe1.orf.atKünstliche Intelligenz außer Kontrolle? | DO | 17 09 2026 | 13:00Wo die Entwicklung von KI-Systemen steht, welche Risiken sich abzeichnen und welche Regulierung geraucht wird. Gäste: Univ.-Prof. Dr. René Mayrhofer, Vorstand des Instituts für Netzwerke und Sicher...

17 Sept

Today at 1:00 p.m. (UTC+2), our new assistant professor, Phillip Rieger, discusses the current state of AI system development, emerging risks, and the regulations required. ! The radio podcast is in German oe1.orf.at/programm/202...

15 Sept

We hope you had a great time at Graz Security Week this year. Will you join us in 2027? 😎☀️ Save the Date: 📅 13.–17.09.2027 #cybersecurity #informationsecurity #tugraz #GSW26 #GSW27 #summerschool

11 Sept

Thank you so much for spending a great week with us. See you in 2027 for #GSW27 ! 🩵

We are pleased to announce that Phillip Rieger has joined ISEC as an Assistant Professor for Secure AI Systems! 🎉

As a second research direction, the SAIS Lab develops resilient methods for applying AI to cybersecurity, with a particular focus on ensuring that these methods remain effective in the presence of adaptive attackers and attempts at manipulation.

Before joining ISEC, Phillip received his PhD from TU Darmstadt, Germany, in 2025.

We are pleased to announce that Phillip Rieger has joined ISEC as an Assistant Professor for Secure AI Systems! 🎉

Phillip will lead the Secure AI Systems (SAIS) Lab, which investigates the security of this ubiquitous technology, identifies security risks and vulnerabilities, and designs defenses to make AI systems secure and privacy-preserving.

At the same time, AI can not only analyze complex data but also do so at scale, making it a powerful tool for cybersecurity.

We are pleased to announce that Phillip Rieger has joined ISEC as an Assistant Professor for Secure AI Systems! 🎉

AI has become part of all aspects of modern life, and our modern society increasingly relies on it for all kinds of tasks, including sensitive and critical ones.

19 Aug

The registration for our summer school is closing soon. Don't miss out on all the cybersecurity shenanigans! Registration Deadline: 23. August 2026 www.securityweek.at #gsw26 #summerschool #cybersecurity

6 Aug

Meet our #GSW26 speakers! 🎤 For the morning sessions of our #summerschool, we’ve invited international experts. Join us from September 7 to 11 for a deep dive into #cybersecurity and register today! Check out the full program here 👇 securityweek.at/program/

31 July

FMCAD’26 is coming closer! From 14–18 September, we’re hosting the annual conference on the theory and applications of formal methods in hardware and system verification in Graz. Join us for talks by Laura Kovács, Clark Barrett, Claire Xenia Wolf, and Travis Hance. 👉 fmcad.org/FMCAD26

ISEC TU GRAZ reposted

Sudheendra Raghav Neela

@snee.la

27 July

I'm happy to announce our work has been accepted at ESORICS 2026: "A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP" Thanks to Carina Fiedler, @rayiizzz.bsky.social, @supersingular.bsky.social, @misc0110.bsky.social, and @gruss.cc for a fun collaboration!

24 July

Bettina Könighofer and her PhD students, Liam Plank and Matthias Grill, visited Castle Dagstuhl, where they attended a research meeting on “Challenges in Robust Decision-Making Under Uncertainty”.

24 July

The research meeting focused on a specific branch of Artificial Intelligence, namely decision-making under uncertainty. Specifically, potentially unknown or unpredictable environments, contextual changes at runtime, or incompleteness of data are commonly referred to as uncertainty.

Researchers from the Institute of Information Security at Graz University of Technology have been awarded an FFG Spin-off Fellowship for the project HOVERA.

The project develops acceleration technologies for privacy-preserving and verifiable computing, allowing data to be processed and verified while confidential information remains protected.

Over the next 18 months, HOVERA will focus on turning internationally recognised TU Graz research in cryptographic engineering and hardware acceleration into practical technology. The fellowship will lay the foundation for a successful future spin-off company.

Researchers from the Institute of Information Security at Graz University of Technology have been awarded an FFG Spin-off Fellowship for the project HOVERA.

The project was one of only seven selected from 60 submissions. The founding team behind HOVERA consists of Florian Hirner (FFG Fellow), Florian Krieger, and Sujoy Sinha Roy.