Luo, Linghui, Goran Piskachev, Ranjith Krishnamurthy, Julian Dolby, Martin Schäf, and Eric Bodden. “Model Generation For Java Frameworks.” In IEEE International Conference on Software Testing, Verification and Validation (ICST), 2023.

Trentinaglia, Roman, Sven Merschjohann, Markus Fockel, and Hendrik Eikerling. “Eliciting Security Requirements – An Experience Report.”https://doi.org/10.1007/978-3-031-29786-1_25__In REFSQ 2023: Requirements Engineering: Foundation for Software Quality. Cham: Springer Nature Switzerland, 2023.https://doi.org/10.1007/978-3-031-29786-1_25 .

Piskachev, Goran, Matthias Becker, and Eric Bodden. “Can the Configuration of Static Analyses Make Resolving Security Vulnerabilities More Effective? - A User Study.”https://doi.org/10.1007/s10664-023-10354-3__Empirical Software Engineering 28, no. 5 (2023).https://doi.org/10.1007/s10664-023-10354-3 .

Fockel, Markus, David Schubert, Roman Trentinaglia, Hannes Schulz, and Wolfgang Kirmair. “Semi-Automatic Integrated Safety and Security Analysis for Automotive Systems.”https://doi.org/10.5220/0010778500003119__In Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development. SCITEPRESS - Science and Technology Publications, 2022.https://doi.org/10.5220/0010778500003119 .

Koch, Thorsten, Sascha Trippel, Stefan Dziwok, and Eric Bodden. “Integrating Security Protocols in Scenario-Based Requirements Specifications.”https://doi.org/10.5220/0010783300003119__In Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development. SCITEPRESS - Science and Technology Publications, 2022.https://doi.org/10.5220/0010783300003119 .

Trentinaglia, Roman. “Deriving Model-Based Safety and Security Assurance Cases from Design Rationale of Countermeasure Patterns.”https://doi.org/10.1145/3550356.3558508__In Proceedings of the 25th International Conference on Model Driven Engineering Languages and Systems: Companion Proceedings. ACM, 2022.https://doi.org/10.1145/3550356.3558508 .

Holtmann, Jörg, Julien Deantoni, and Markus Fockel. “Early Timing Analysis Based on Scenario Requirements and Platform Models.”https://doi.org/10.1007/s10270-022-01002-3__Software and Systems Modeling, 2022.https://doi.org/10.1007/s10270-022-01002-3 .

Piskachev, Goran, Johannes Späth, Ingo Budde, and Eric Bodden. “Fluently Specifying Taint-Flow Queries with FluentTQL.” Empirical Software Engineering 27, no. 5 (2022): 1–33.

Krishnamurthy, Ranjith, Goran Piskachev, and Eric Bodden. “To What Extent Can We Analyze Kotlin Programs Using Existing Java Taint Analysis Tools?” IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM), 2022.

Piskachev, Goran, Stefan Dziwok, Thorsten Koch, Sven Merschjohann, and Eric Bodden. “How Far Are German Companies in Improving Security through Static Program Analysis Tools?” IEEE Secure Development Conference (SecDev), 2022.

Holtmann, Jörg, Jan-Phillipp Steghöfer, Michael Rath, and David Schmelter. “Cutting through the Jungle: Disambiguating Model-Based Traceability Terminology (Extended Abstract).”https://doi.org/10.18420/SE2021_18__In Software Engineering 2021, edited by Anne Koziolek, Ina Schaefer, and Christoph Seidl, P-310:59–60. Lecture Notes in Informatics (LNI), 2021.https://doi.org/10.18420/SE2021_18 .

Schubert, David, Hendrik Eikerling, and Jörg Holtmann. “Application-Aware Intrusion Detection: A Systematic Literature Review, Implications for Automotive Systems, and Applicability of AutoML.”https://doi.org/10.3389/fcomp.2021.567873__Frontiers in Computer Science 3 (2021).https://doi.org/10.3389/fcomp.2021.567873 .

Dziwok, Stefan, Thorsten Koch, Sven Merschjohann, Boris Budweg, and Sebastian Leuer. “AppSecure.Nrw Software Security Study.” ArXiv:2108.11752, 2021.

Kummita, Sriteja, Goran Piskachev, Johannes Spath, and Eric Bodden. “Qualitative and Quantitative Analysis of Callgraph Algorithms for Python.”https://doi.org/10.1109/iccq51190.2021.9392986__In 2021 International Conference on Code Quality (ICCQ), 2021.https://doi.org/10.1109/iccq51190.2021.9392986 .

Steghofer, Jan-Philipp, Bjorn Koopmann, Jan Steffen Becker, Ingo Stierand, Marc Zeller, Maria Bonner, David Schmelter, and Salome Maro. “The MobSTr Dataset – An Exemplar for Traceability and Model-Based Safety Assessment.”https://doi.org/10.1109/re51729.2021.00062__In 2021 IEEE 29th International Requirements Engineering Conference (RE). IEEE, 2021.https://doi.org/10.1109/re51729.2021.00062 .

Piskachev, Goran, Ranjith Krishnamurthy, and Eric Bodden. “SecuCheck: Engineering Configurable Taint Analysis for Software Developers.” In 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.

Holtmann, Jörg, Jan-Philipp Steghofer, Michael Rath, and David Schmelter. “Cutting through the Jungle: Disambiguating Model-Based Traceability Terminology.”https://doi.org/10.1109/re48521.2020.00014__In 2020 IEEE 28th International Requirements Engineering Conference (RE). IEEE, 2020.https://doi.org/10.1109/re48521.2020.00014 .

Koch, Thorsten, Stefan Dziwok, Jörg Holtmann, and Eric Bodden. “Scenario-Based Specification of Security Protocols and Transformation to Security Model Checkers.”https://doi.org/10.1145/3365438.3410946__In ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20). ACM, 2020.https://doi.org/10.1145/3365438.3410946 .

Piskachev, Goran, Lisa Nguyen Quang Do, Oshando Johnson, and Eric Bodden. “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.”https://doi.org/10.1109/ase.2019.00110__In 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020.https://doi.org/10.1109/ase.2019.00110 .

Piskachev, Goran, Tobias Petrasch, Johannes Späth, and Eric Bodden. “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities.”https://doi.org/10.1007/978-3-030-54997-8_34__In Lecture Notes in Computer Science. Cham, 2020.https://doi.org/10.1007/978-3-030-54997-8_34 .