A Systematic Analysis and Hardening of the Java Security Architecture
P. Holzinger, A Systematic Analysis and Hardening of the Java Security Architecture, Universität Paderborn, 2019.

User-Centered Tool Design for Data-Flow Analysis
L. Nguyen Quang Do, User-Centered Tool Design for Data-Flow Analysis, Universität Paderborn, 2019.

Architectural Runtime Verification
L. Stockmann, S. Laux, E. Bodden, in: 2019 IEEE International Conference on Software Architecture Companion (ICSA-C), 2019, pp. 77–84.

The Impact of Developer Experience in Using Java Cryptography
M. Hazhirpasand, M. Ghafari, S. Krüger, E. Bodden, O. Nierstrasz, in: 2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), 2019, pp. 1–6.

AuthCheck: Program-state Analysis for Access-control Vulnerabilities
G. Piskachev, T. Petrasch, J. Späth, E. Bodden, in: 10th Workshop on Tools for Automatic Program Analysis (TAPAS), 2019.

Explaining Static Analysis -- A Perspective
M. Nachtigall, L. Nguyen Quang Do, E. Bodden, in: 1st International Workshop on Explainable Software (EXPLAIN) at ASE, 2019.

A Qualitative Analysis of Android Taint-Analysis Results
L. Luo, E. Bodden, J. Späth, in: IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), 2019.

SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods
G. Piskachev, L. Nguyen Quang Do, O. Johnson, E. Bodden, in: IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track, 2019.

CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs
S. Krüger, J. Späth, K. Ali, E. Bodden, M. Mezini, IEEE Transactions on Software Engineering (2019) 1–1.

Codebase-Adaptive Detection of Security-Relevant Methods
G. Piskachev, L. Nguyen Quang Do, E. Bodden, in: ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2019.

MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors
L. Luo, J. Dolby, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2019.

Synchronized Pushdown Systems for Pointer and Data-Flow Analysis
J. Späth, Synchronized Pushdown Systems for Pointer and Data-Flow Analysis, Universität Paderborn, 2019.

Codebase-Adaptive Detection of Security-Relevant Methods
G. Piskachev, L. Nguyen, E. Bodden, Codebase-Adaptive Detection of Security-Relevant Methods, 2019.

ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware
S. Albert Gorski Iii, B. Andow, A. Nadkarni, S. Manandhar, W. Enck, E. Bodden, A. Bartel, in: ACM Conference on Data and Application Security and Privacy (CODASPY 2019), 2019.

Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems
J. Späth, K. Ali, E. Bodden, Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages 3 (2019) 48:1-48:29.

Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures
C. Gerking, D. Schubert, in: International Conference on Software Architecture (ICSA 2019), 2019.

Codebase-adaptive detection of security-relevant methods
G. Piskachev, L.N.Q. Do, E. Bodden, in: Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2019.

Modeling Crypto API usages in OpenSSL's EVP library
N. Selbach, Modeling Crypto API Usages in OpenSSL’s EVP Library, Universität Paderborn, 2019.

ModGuard: Identifying Integrity &Confidentiality Violations in Java Modules
A. Dann, B. Hermann, E. Bodden, IEEE Transactions on Software Engineering (2019) 1–1.

SootDiff: bytecode comparison across different Java compilers
A. Dann, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019, 2019.