Assessing and Communicating Software Security: Enhancing Software Product Health with Architectural Threat Analysis
J. Strüwer, R. Trentinaglia, B. Wohlers, E. Bodden, R. Dumitrescu, in: AHFE International, AHFE International, 2025.

Evaluating Security Through Isolation and Defense in Depth
E. Bodden, J. Pottebaum, M. Fockel, I. Gräßler, IEEE Security &; Privacy 22 (2024) 69–72.

Detecting Security-Relevant Methods using Multi-label Machine Learning
O. Johnson, G. Piskachev, R. Krishnamurthy, E. Bodden, in: Proceedings of the 46th International Conference on Software Engineering, IDE Workshop, 2024.

Security Belts: A Maturity Model for DevOps Teams to Increase the Software Security of their Product - An Experience Report
S. Taaibi, S. Dziwok, L. Hermerschmidt, T. Koch, S. Merschjohann, M. Vollmary, in: n.d.

Scaling Interprocedural Static Data-Flow Analysis to Large C/C++ Applications: An Experience Report
F. Schiebel, F. Sattler, P.D. Schubert, S. Apel, E. Bodden, in: J. Aldrich, G. Salvaneschi (Eds.), 38th European Conference on Object-Oriented Programming (ECOOP 2024), Schloss Dagstuhl – Leibniz-Zentrum für Informatik, Dagstuhl, Germany, 2024, p. 36:1–36:28.

Whitepaper: From HARA and TARA to Risk-Based Safety and Security Dependency Testing
R. Trentinaglia, M. Fockel, M. Pukrop, T. Schaeffer, Whitepaper: From HARA and TARA to Risk-Based Safety and Security Dependency Testing, dSPACE GmbH, 2024.

Automatically deriving test cases from safety-security dependencies
R. Trentinaglia, M. Fockel, M. Pukrop, T. Schaeffer, in: 22th Escar Europef: The World’s Leading Automotive Cyber Security Conferencef: Embedded Security in Cars (Dortmund, 19. - 20.11.2024), 2024.

Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study
G. Piskachev, M. Becker, E. Bodden, Empirical Software Engineering 28 (2023).

Trustful Model-Based Information Exchange in Collaborative Engineering
D. Schmelter, J.-P. Steghöfer, K. Albers, M. Ekman, J. Tessmer, R. Weber, in: Communications in Computer and Information Science, Springer Nature Switzerland, Cham, 2023.

Eliciting Security Requirements – An Experience Report
R. Trentinaglia, S. Merschjohann, M. Fockel, H. Eikerling, in: REFSQ 2023: Requirements Engineering: Foundation for Software Quality, Springer Nature Switzerland, Cham, 2023.

Model Generation For Java Frameworks
L. Luo, G. Piskachev, R. Krishnamurthy, J. Dolby, M. Schäf, E. Bodden, in: IEEE International Conference on Software Testing, Verification and Validation (ICST), 2023.

Semi-automatic Integrated Safety and Security Analysis for Automotive Systems
M. Fockel, D. Schubert, R. Trentinaglia, H. Schulz, W. Kirmair, in: Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development, SCITEPRESS - Science and Technology Publications, 2022.

Integrating Security Protocols in Scenario-based Requirements Specifications
T. Koch, S. Trippel, S. Dziwok, E. Bodden, in: Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development, SCITEPRESS - Science and Technology Publications, 2022.

Early timing analysis based on scenario requirements and platform models
J. Holtmann, J. Deantoni, M. Fockel, Software and Systems Modeling (2022).

Fluently specifying taint-flow queries with fluentTQL
G. Piskachev, J. Späth, I. Budde, E. Bodden, Empirical Software Engineering 27 (2022) 1–33.

To what extent can we analyze Kotlin programs using existing Java taint analysis tools?
R. Krishnamurthy, G. Piskachev, E. Bodden, (2022).

How far are German companies in improving security through static program analysis tools?
G. Piskachev, S. Dziwok, T. Koch, S. Merschjohann, E. Bodden, (2022).

Deriving model-based safety and security assurance cases from design rationale of countermeasure patterns
R. Trentinaglia, in: Proceedings of the 25th International Conference on Model Driven Engineering Languages and Systems: Companion Proceedings, ACM, 2022.

Cutting through the Jungle: Disambiguating Model-based Traceability Terminology (Extended Abstract)
J. Holtmann, J.-P. Steghöfer, M. Rath, D. Schmelter, in: A. Koziolek, I. Schaefer, C. Seidl (Eds.), Software Engineering 2021, 2021, pp. 59–60.

Application-Aware Intrusion Detection: A Systematic Literature Review, Implications for Automotive Systems, and Applicability of AutoML
D. Schubert, H. Eikerling, J. Holtmann, Frontiers in Computer Science 3 (2021).