Using Attack and Failure Propagation Analysis for Context-Aware Security Control Suggestions
R. Trentinaglia, T. Koch, E. Bodden, in: Proceedings of the 14th International Conference on Model-Based Software and Systems Engineering, SCITEPRESS - Science and Technology Publications, 2026.

Program Feature-Based Benchmarking for Fuzz Testing
M. Miao, S. Kummita, E. Bodden, S. Wei, Proceedings of the ACM on Software Engineering 2 (2025) 527–549.

Assessing and Communicating Software Security: Enhancing Software Product Health with Architectural Threat Analysis
J. Strüwer, R. Trentinaglia, B. Wohlers, E. Bodden, R. Dumitrescu, in: AHFE International, AHFE International, 2025.

Enabling Android Application Monitoring by Characterizing Security-Critical Code Fragments
H. Eikerling, A. Kampkötter, in: Lecture Notes in Computer Science, Springer Nature Switzerland, Cham, 2025.

Detecting Security-Relevant Methods using Multi-label Machine Learning
O. Johnson, G. Piskachev, R. Krishnamurthy, E. Bodden, in: Proceedings of the 46th International Conference on Software Engineering, IDE Workshop, 2024.

Whitepaper: From HARA and TARA to Risk-Based Safety and Security Dependency Testing
R. Trentinaglia, M. Fockel, M. Pukrop, T. Schaeffer, Whitepaper: From HARA and TARA to Risk-Based Safety and Security Dependency Testing, dSPACE GmbH, 2024.

Automatically deriving test cases from safety-security dependencies
R. Trentinaglia, M. Fockel, M. Pukrop, T. Schaeffer, in: 22th Escar Europef: The World’s Leading Automotive Cyber Security Conferencef: Embedded Security in Cars (Dortmund, 19. - 20.11.2024), 2024.

Scaling Interprocedural Static Data-Flow Analysis to Large C/C++ Applications: An Experience Report
F.B. Schiebel, F. Sattler, P.D. Schubert, S. Apel, E. Bodden, in: J. Aldrich, G. Salvaneschi (Eds.), 38th European Conference on Object-Oriented Programming (ECOOP 2024), Schloss Dagstuhl – Leibniz-Zentrum für Informatik, Dagstuhl, Germany, 2024, p. 36:1–36:28.

Evaluating Security Through Isolation and Defense in Depth
E. Bodden, J. Pottebaum, M. Fockel, I. Gräßler, IEEE Security &; Privacy 22 (2024) 69–72.

Security Belts: A Maturity Model for DevOps Teams to Increase the Software Security of their Product - An Experience Report
S. Taaibi, S. Dziwok, L. Hermerschmidt, T. Koch, S. Merschjohann, M. Vollmary, in: AMCIS 2024 Proceedings. 13., n.d.

Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study
G. Piskachev, M. Becker, E. Bodden, Empirical Software Engineering 28 (2023).

Trustful Model-Based Information Exchange in Collaborative Engineering
D. Schmelter, J.-P. Steghöfer, K. Albers, M. Ekman, J. Tessmer, R. Weber, in: Communications in Computer and Information Science, Springer Nature Switzerland, Cham, 2023.

Eliciting Security Requirements – An Experience Report
R. Trentinaglia, S. Merschjohann, M. Fockel, H. Eikerling, in: REFSQ 2023: Requirements Engineering: Foundation for Software Quality, Springer Nature Switzerland, Cham, 2023.

Model Generation For Java Frameworks
L. Luo, G. Piskachev, R. Krishnamurthy, J. Dolby, M. Schäf, E. Bodden, in: IEEE International Conference on Software Testing, Verification and Validation (ICST), 2023.

Semi-automatic Integrated Safety and Security Analysis for Automotive Systems
M. Fockel, D. Schubert, R. Trentinaglia, H. Schulz, W. Kirmair, in: Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development, SCITEPRESS - Science and Technology Publications, 2022.

Integrating Security Protocols in Scenario-based Requirements Specifications
T. Koch, S. Trippel, S. Dziwok, E. Bodden, in: Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development, SCITEPRESS - Science and Technology Publications, 2022.

Early timing analysis based on scenario requirements and platform models
J. Holtmann, J. Deantoni, M. Fockel, Software and Systems Modeling (2022).

Fluently specifying taint-flow queries with fluentTQL
G. Piskachev, J. Späth, I. Budde, E. Bodden, Empirical Software Engineering 27 (2022) 1–33.

To what extent can we analyze Kotlin programs using existing Java taint analysis tools?
R. Krishnamurthy, G. Piskachev, E. Bodden, (2022).

How far are German companies in improving security through static program analysis tools?
G. Piskachev, S. Dziwok, T. Koch, S. Merschjohann, E. Bodden, (2022).