Evaluating Security Through Isolation and Defense in Depth
E. Bodden, J. Pottebaum, M. Fockel, I. Gräßler, IEEE Security &; Privacy 22 (2024) 69–72.

Detecting Security-Relevant Methods using Multi-label Machine Learning
O. Johnson, G. Piskachev, R. Krishnamurthy, E. Bodden, in: Proceedings of the 46th International Conference on Software Engineering, IDE Workshop, 2024.

Model Generation For Java Frameworks
L. Luo, G. Piskachev, R. Krishnamurthy, J. Dolby, M. Schäf, E. Bodden, in: IEEE International Conference on Software Testing, Verification and Validation (ICST), 2023.

Eliciting Security Requirements – An Experience Report
R. Trentinaglia, S. Merschjohann, M. Fockel, H. Eikerling, in: REFSQ 2023: Requirements Engineering: Foundation for Software Quality, Springer Nature Switzerland, Cham, 2023.

Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study
G. Piskachev, M. Becker, E. Bodden, Empirical Software Engineering 28 (2023).

Semi-automatic Integrated Safety and Security Analysis for Automotive Systems
M. Fockel, D. Schubert, R. Trentinaglia, H. Schulz, W. Kirmair, in: Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development, SCITEPRESS - Science and Technology Publications, 2022.

Integrating Security Protocols in Scenario-based Requirements Specifications
T. Koch, S. Trippel, S. Dziwok, E. Bodden, in: Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development, SCITEPRESS - Science and Technology Publications, 2022.

Deriving model-based safety and security assurance cases from design rationale of countermeasure patterns
R. Trentinaglia, in: Proceedings of the 25th International Conference on Model Driven Engineering Languages and Systems: Companion Proceedings, ACM, 2022.

Early timing analysis based on scenario requirements and platform models
J. Holtmann, J. Deantoni, M. Fockel, Software and Systems Modeling (2022).

Fluently specifying taint-flow queries with fluentTQL
G. Piskachev, J. Späth, I. Budde, E. Bodden, Empirical Software Engineering 27 (2022) 1–33.

To what extent can we analyze Kotlin programs using existing Java taint analysis tools?
R. Krishnamurthy, G. Piskachev, E. Bodden, (2022).

How far are German companies in improving security through static program analysis tools?
G. Piskachev, S. Dziwok, T. Koch, S. Merschjohann, E. Bodden, (2022).

Cutting through the Jungle: Disambiguating Model-based Traceability Terminology (Extended Abstract)
J. Holtmann, J.-P. Steghöfer, M. Rath, D. Schmelter, in: A. Koziolek, I. Schaefer, C. Seidl (Eds.), Software Engineering 2021, 2021, pp. 59–60.

Application-Aware Intrusion Detection: A Systematic Literature Review, Implications for Automotive Systems, and Applicability of AutoML
D. Schubert, H. Eikerling, J. Holtmann, Frontiers in Computer Science 3 (2021).

AppSecure.nrw Software Security Study
S. Dziwok, T. Koch, S. Merschjohann, B. Budweg, S. Leuer, ArXiv:2108.11752 (2021).

Qualitative and Quantitative Analysis of Callgraph Algorithms for Python
S. Kummita, G. Piskachev, J. Spath, E. Bodden, in: 2021 International Conference on Code Quality (ICCQ), 2021.

The MobSTr Dataset – An Exemplar for Traceability and Model-based Safety Assessment
J.-P. Steghofer, B. Koopmann, J. Steffen Becker, I. Stierand, M. Zeller, M. Bonner, D. Schmelter, S. Maro, in: 2021 IEEE 29th International Requirements Engineering Conference (RE), IEEE, 2021.

SecuCheck: Engineering configurable taint analysis for software developers
G. Piskachev, R. Krishnamurthy, E. Bodden, in: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.

Cutting through the Jungle: Disambiguating Model-based Traceability Terminology
J. Holtmann, J.-P. Steghofer, M. Rath, D. Schmelter, in: 2020 IEEE 28th International Requirements Engineering Conference (RE), IEEE, 2020.

Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers
T. Koch, S. Dziwok, J. Holtmann, E. Bodden, in: ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20), ACM, 2020.

SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods
G. Piskachev, L. Nguyen Quang Do, O. Johnson, E. Bodden, in: 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020.

AuthCheck: Program-State Analysis for Access-Control Vulnerabilities
G. Piskachev, T. Petrasch, J. Späth, E. Bodden, in: Lecture Notes in Computer Science, Cham, 2020.

Softwareentwicklung wie am Fliessband
T. Koch, M. Meyer, M. Fazal-Baqaie, H. Runschke, in: M. Felderer, W. Hasselbring, R. Rabiser, R. Jung (Eds.), Software Engineering 2020 (SE 2020), Gesellschaft für Informatik e.V., 2020.

Coaching on the Job bei Unternehmen des Maschinen- und Anlagenbaus - Wissenslücken schließen zur Weiterpflege modernisierter IT-Anwendungen
M. Fazal-Baqaie, J.-N. Strüwer, D. Schmelter, S. Dziwok, in: M. Mikusz (Ed.), Projektmanagement Und Vorgehensmodelle 2019 (PVM 2019), Lecture Notes in Informatics (LNI), 2019.

Designing and Integrating IEC 62443 Compliant Threat Analysis
M. Fockel, S. Merschjohann, M. Fazal-Baqaie, T. Förder, S. Hausmann, B. Waldeck, in: European System, Software &; Service Process Improvement &; Innovation Conference (EuroSPI 2019), 2019.

Codebase-adaptive detection of security-relevant methods
G. Piskachev, L.N.Q. Do, E. Bodden, in: Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2019.

Was fehlt (bisher) um Apps sicher zu entwickeln? - Prozesse, Werkzeuge und Schulungen für sichere Apps by Design
K. Altemeier, M. Becker, S. Dziwok, T. Koch, S. Merschjohann, in: M. Mikusz (Ed.), Projektmanagement Und Vorgehensmodelle 2019 (PVM 2019), Gesellschaft für Informatik e.V., 2019.

Safety Requirements Engineering for Early SIL Tailoring
M. Fockel, Safety Requirements Engineering for Early SIL Tailoring, Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn, 2018.

Threat Analysis in Practice - Systematically Deriving Security Requirements
M. Fockel, S. Merschjohann, M. Fazal-Baqaie, in: 19th International Conference on Product-Focused Software Process Improvement (PROFES 2018), Springer Nature Switzerland AG, 2018.

Model-Driven STEP Application Protocol Extensions Combined with Feature Modeling Considering Geometrical Information
T. Koch, J. Holtmann, T. Lindemann, in: L.F. Pires, S. Hammoudi, B. Selic (Eds.), Revised Selected Papers of the 5th International Conference on Model-Driven Engineering and Software Development, Springer International Publishing, 2018, pp. 173–197.

Towards Scenario-based Security Requirements Engineering for Cyber-Physical Systems
T. Koch, in: International Workshop on Security for and by Model-Driven Engineering (SecureMDE 2018), 2018.

Automated Synthesis of a Real-Time Scheduling for Cyber-Physical Multi-core Systems
J. Geismann, R. Höttger, L. Krawczyk, U. Pohlmann, D. Schmelter, in: L.F. Pires, S. Hammoudi, B. Selic (Eds.), Model-Driven Engineering and Software Development, Springer International Publishing, Cham, 2018, pp. 72–93.

Formal, Model- and Scenario-based Requirement Patterns
M. Fockel, J. Holtmann, T. Koch, D. Schmelter, in: 6th International Conference on Model-Driven Engineering and Software Development (MODELSWARD 2018), 2018.

Improving Quality Control of Mechatronic Systems Using KPI-Based Statistical Process Control
B. Wohlers, S. Dziwok, D. Schmelter, W. Lorenz, Advances in Manufacturing, Production Management and Process Control - AHFE 2018 (2018) 398–410.

Systemmodelle als Schlüssel zu durchgängigen XIL-Testszenarien
J. Schmitz, M. Fockel, in:  Tag Des Systems Engineering 2017, Gesellschaft f\'22ur Systems Engineering e.V., 2017.

Model-based Requirement Pattern Catalog
M. Fockel, J. Holtmann, T. Koch, D. Schmelter, Model-Based Requirement Pattern Catalog, Paderborn, Germany, 2017.

Toward Learning Realizable Scenario-based, Formal Requirements Specifications
D. Schmelter, J. Greenyer, J. Holtmann, in: 4th International Workshop on Artificial Intelligence for Requirements Engineering (AIRE), IEEE, Lisbon, Portugal, 2017.

Improving the Product Control of Mechatronic Systems Using Key Performance Indicators
B. Wohlers, S. Dziwok, C. Bremer, D. Schmelter, W. Lorenz, in: Proceedings of the 24th International Conference on Production Research (ICPR), DEStech Publications, Inc., 2017.

Flexible Specification of STEP Application Protocol Extensions and Automatic Derivation of Tool Capabilities
T. Koch, J. Holtmann, T. Lindemann, in: Proceedings of the 5th International Conference on Model-Driven Engineering and Software Development, 2017.

Integrated and Iterative Systems Engineering and Software Requirements Engineering for Technical Systems (Précis)
J. Holtmann, R. Bernijazov, M. Meyer, D. Schmelter, C. Tschirner, in: J. Jürjens, K. Schneider (Eds.), Proceedings of the Software Engineering 2017, Gesellschaft fuer Informatik, 2017, pp. 109–110.

Towards an Automated Synthesis of a Real-time Scheduling for Cyber-physical Multi-core Systems
J. Geismann, U. Pohlmann, D. Schmelter, in: Proceedings of the 5th International Conference on Model-Driven Engineering and Software Development, 2017.

The MechatronicUML Requirements Engineering Method: Process and Language
J. Holtmann, M. Fockel, T. Koch, D. Schmelter, C. Brenner, R. Bernijazov, M. Sander, The MechatronicUML Requirements Engineering Method: Process and Language, 2016.

Towards Feature-based Product Line Engineering of Technical Systems
T. Koch, J. Holtmann, D. Schubert, T. Lindemann, in: A. Trächtler, B. Denkena, K.-D. Thoben (Eds.), 3rd International Conference on System-Integrated Intelligence: New Challenges for Product and Production Engineering (SysInt 2016), Elsevier, 2016, pp. 447–454.

ASIL Tailoring on Functional Safety Requirements
M. Fockel, in: 5th International Workshop on Next Generation of System Assurance Approaches for Safety-Critical Systems (SASSUR), Springer International Publishing Switzerland, Trondheim, Norway, 2016, pp. 298–310.

Requirements Engineering - Zusatzaufgabe oder Kernkompetenz?
J. Holtmann, M. Fockel, T. Koch, D. Schmelter, OBJEKTspektrum (2016).

Integrated and iterative systems engineering and software requirements engineering for technical systems
J. Holtmann, R. Bernijazov, M. Meyer, D. Schmelter, C. Tschirner, Journal of Software Evolution and Process (2016).

Vom Systemmodell zu disziplinspezifischen Modellen und zurück
J. Schmitz, M. Fockel, in: Tag Des Systems Engineering 2015, Gesellschaft für Systems Engineering e.V., 2015.

Systementwurf unter Einbeziehung funktionaler Sicherheit bei automobilen Steuergeräten
J. Meyer, M. Fockel, J. Holtmann, in: Tag Des Systems Engineering 2015, Gesellschaft für Systems Engineering e.V., 2015.

ReqPat: Efficient Documentation of High-quality Requirements using Controlled Natural Language
M. Fockel, J. Holtmann, in: Proc. of the 23rd International Requirements Engineering Conference 2015 (R), IEEE, 2015.

Integrated systems engineering and software requirements engineering for technical systems
J. Holtmann, R. Bernijazov, M. Meyer, D. Schmelter, C. Tschirner, in: Proceedings of the 2015 International Conference on Software and System Process, 2015.

Generierung von AUTOSAR-Modellen aus UML-Spezifikationen
J. Meyer, J. Holtmann, T. Koch, M. Meyer, in: J. Gausemeier, R. Dumitrescu, F.-J. Rammig, W. Schäfer, A. Trächtler (Eds.), 10. Paderborner Workshop Entwurf Mechatronischer Systeme, Heinz Nixdorf Institut, 2015, pp. 159–172.

A requirements engineering methodology combining models and controlled natural language
M. Fockel, J. Holtmann, in: 2014 IEEE 4th International Model-Driven Requirements Engineering Workshop (MoDRE), 2014.

Generating EAST-ADL Event Chains from Scenario-Based Requirements Specifications
T. Koch, J. Holtmann, J. DeAntoni, in: Software Architecture, Cham, 2014.

Mit Satzmustern hochwertige Anforderungsdokumente effizient erstellen
M. Fockel, J. Holtmann, M. Meyer, OBJEKTspektrum (2014).

Goal-Scenario-Oriented Requirements Engineering for Functional Decomposition with Bidirectional Transformation to Controlled Natural Language. Case Study "Body Control Module"
M. Daun, M. Fockel, J. Holtmann, B. Tenbergen, Goal-Scenario-Oriented Requirements Engineering for Functional Decomposition with Bidirectional Transformation to Controlled Natural Language. Case Study “Body Control Module,” 2013.

Semi-automatic establishment and maintenance of valid traceability in automotive development processes
M. Fockel, J. Holtmann, J. Meyer, in: 2012 Second International Workshop on Software Engineering for Embedded Systems (SEES), 2012.

Application and Evaluation in the Automotive Domain
M. Fockel, P. Heidl, J. Höfflinger, H. Hönninger, J. Holtmann, W. Horn, J. Meyer, M. Meyer, J. Schäuffele, in: Model-Based Engineering of Embedded Systems, Berlin, Heidelberg, 2012.