UpCy: Safely Updating Outdated Dependencies
A.P. Dann, B. Hermann, E. Bodden, (2023).

Static data-flow analysis for software product lines in C
P. Schubert, P. Gazzillo, Z. Patterson, J. Braha, F. Schiebel, B. Hermann, S. Wei, E. Bodden, Automated Software Engineering 29 (2022).

TaintBench: Automatic real-world malware benchmarking of Android taint analyses
L. Luo, F. Pauck, G. Piskachev, M. Benz, I. Pashchenko, M. Mory, E. Bodden, B. Hermann, F. Massacci, Empirical Software Engineering (2021).

Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis
P. Schubert, B. Hermann, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2021.

Identifying Challenges for OSS Vulnerability Scanners - A Study &amp; Test Suite
A.P. Dann, H. Plate, B. Hermann, S.E. Ponta, E. Bodden, IEEE Transactions on Software Engineering (2021) 1–1.

Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++
P. Schubert, B. Hermann, E. Bodden, R. Leer, in: SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track), 2021.

Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++
P. Schubert, F. Sattler, F. Schiebel, B. Hermann, E. Bodden, in: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.

Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries
P. Schubert, E. Bodden, B. Hermann, Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries, 2020.

ModGuard: Identifying Integrity &Confidentiality Violations in Java Modules
A. Dann, B. Hermann, E. Bodden, IEEE Transactions on Software Engineering (2019) 1–1.

SootDiff: bytecode comparison across different Java compilers
A. Dann, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019, 2019.

Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts
S. Kruger, B. Hermann, in: 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE), 2019.

PhASAR: An Inter-Procedural Static Analysis Framework for C/C++
P. Schubert, B. Hermann, E. Bodden, in: Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), 2019, pp. 393–410.

Know your analysis: how instrumentation aids understanding static analysis
P. Schubert, R. Leer, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019, 2019.

Hardening Java’s Access Control by Abolishing Implicit Privilege Elevation
P. Holzinger, B. Hermann, J. Lerch, E. Bodden, M. Mezini, in: 2017 IEEE Symposium on Security and Privacy (SP), IEEE, 2017.

Hermes: assessment and creation of effective test corpora
M. Reif, M. Eichberg, B. Hermann, M. Mezini, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2017, ACM Press, 2017.

SootKeeper: runtime reusability for modular static analysis
F. Kübler, P. Müller, B. Hermann, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2017, ACM Press, 2017.

Call graph construction for Java libraries
M. Reif, M. Eichberg, B. Hermann, J. Lerch, M. Mezini, in: Proceedings of the 2016 24th ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2016, ACM Press, 2016.

A vulnerability's lifetime
L. Glanz, S. Schmidt, S. Wollny, B. Hermann, in: Proceedings of the 15th International Conference on Knowledge Technologies and Data-Driven Business - i-KNOW ’15, ACM Press, 2015.

Design your analysis: a case study on implementation reusability of data-flow functions
J. Lerch, B. Hermann, in: Proceedings of the 4th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2015, ACM Press, 2015.

Getting to know you: towards a capability model for Java
B. Hermann, M. Reif, M. Eichberg, M. Mezini, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.

Hidden truths in dead software paths
M. Eichberg, B. Hermann, M. Mezini, L. Glanz, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.

A software product line for static analyses: The OPAL framework
M. Eichberg, B. Hermann, in: Proceedings of the 3rd ACM SIGPLAN International Workshop on the State of the Art in Java Program Analysis - SOAP ’14, ACM Press, 2014.

FlowTwist: efficient context-sensitive inside-out taint analysis for large codebases
J. Lerch, B. Hermann, E. Bodden, M. Mezini, in: Proceedings of the 22nd ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2014, ACM Press, 2014.