To what extent can we analyze Kotlin programs using existing Java taint analysis tools?
R. Krishnamurthy, G. Piskachev, E. Bodden, (2022).
LibreCat: /record/33838

How far are German companies in improving security through static program analysis tools?
G. Piskachev, S. Dziwok, T. Koch, S. Merschjohann, E. Bodden, (2022).
LibreCat: /record/33837

Cutting through the Jungle: Disambiguating Model-based Traceability Terminology (Extended Abstract)
J. Holtmann, J.-P. Steghöfer, M. Rath, D. Schmelter, in: A. Koziolek, I. Schaefer, C. Seidl (Eds.), Software Engineering 2021, 2021, pp. 59–60.
LibreCat: /record/21326
DOI: 10.18420/SE2021_18

Application-Aware Intrusion Detection: A Systematic Literature Review, Implications for Automotive Systems, and Applicability of AutoML
D. Schubert, H. Eikerling, J. Holtmann, Frontiers in Computer Science 3 (2021).
LibreCat: /record/23526
DOI: 10.3389/fcomp.2021.567873

AppSecure.nrw Software Security Study
S. Dziwok, T. Koch, S. Merschjohann, B. Budweg, S. Leuer, ArXiv:2108.11752 (2021).
LibreCat: /record/23534

Qualitative and Quantitative Analysis of Callgraph Algorithms for Python
S. Kummita, G. Piskachev, J. Spath, E. Bodden, in: 2021 International Conference on Code Quality (ICCQ), 2021.
LibreCat: /record/23374
DOI: 10.1109/iccq51190.2021.9392986

The MobSTr Dataset – An Exemplar for Traceability and Model-based Safety Assessment
J.-P. Steghofer, B. Koopmann, J. Steffen Becker, I. Stierand, M. Zeller, M. Bonner, D. Schmelter, S. Maro, in: 2021 IEEE 29th International Requirements Engineering Conference (RE), IEEE, 2021.
LibreCat: /record/29715
DOI: 10.1109/re51729.2021.00062

SecuCheck: Engineering configurable taint analysis for software developers
G. Piskachev, R. Krishnamurthy, E. Bodden, in: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.
LibreCat: /record/26407

Cutting through the Jungle: Disambiguating Model-based Traceability Terminology
J. Holtmann, J.-P. Steghofer, M. Rath, D. Schmelter, in: 2020 IEEE 28th International Requirements Engineering Conference (RE), IEEE, 2020.
LibreCat: /record/20516
DOI: 10.1109/re48521.2020.00014

Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers
T. Koch, S. Dziwok, J. Holtmann, E. Bodden, in: ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20), ACM, 2020.
LibreCat: /record/20518
DOI: 10.1145/3365438.3410946

SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods
G. Piskachev, L. Nguyen Quang Do, O. Johnson, E. Bodden, in: 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020.
LibreCat: /record/23376
DOI: 10.1109/ase.2019.00110

AuthCheck: Program-State Analysis for Access-Control Vulnerabilities
G. Piskachev, T. Petrasch, J. Späth, E. Bodden, in: Lecture Notes in Computer Science, Cham, 2020.
LibreCat: /record/23377
DOI: 10.1007/978-3-030-54997-8_34

Softwareentwicklung wie am Fliessband
T. Koch, M. Meyer, M. Fazal-Baqaie, H. Runschke, in: M. Felderer, W. Hasselbring, R. Rabiser, R. Jung (Eds.), Software Engineering 2020 (SE 2020), Gesellschaft für Informatik e.V., 2020.
LibreCat: /record/21931
DOI: 10.18420/SE2020‑58

Coaching on the Job bei Unternehmen des Maschinen- und Anlagenbaus - Wissenslücken schließen zur Weiterpflege modernisierter IT-Anwendungen
M. Fazal-Baqaie, J.-N. Strüwer, D. Schmelter, S. Dziwok, in: M. Mikusz (Ed.), Projektmanagement Und Vorgehensmodelle 2019 (PVM 2019), Lecture Notes in Informatics (LNI), 2019.
LibreCat: /record/20757

Designing and Integrating IEC 62443 Compliant Threat Analysis
M. Fockel, S. Merschjohann, M. Fazal-Baqaie, T. Förder, S. Hausmann, B. Waldeck, in: European System, Software &; Service Process Improvement &; Innovation Conference (EuroSPI 2019), 2019.
LibreCat: /record/22805
DOI: 10.1007/978-3-030-28005-5_5

Codebase-adaptive detection of security-relevant methods
G. Piskachev, L.N.Q. Do, E. Bodden, in: Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2019.
LibreCat: /record/23378
DOI: 10.1145/3293882.3330556

Was fehlt (bisher) um Apps sicher zu entwickeln? - Prozesse, Werkzeuge und Schulungen für sichere Apps by Design
K. Altemeier, M. Becker, S. Dziwok, T. Koch, S. Merschjohann, in: M. Mikusz (Ed.), Projektmanagement Und Vorgehensmodelle 2019 (PVM 2019), Gesellschaft für Informatik e.V., 2019.
LibreCat: /record/21929

Safety Requirements Engineering for Early SIL Tailoring
M. Fockel, Safety Requirements Engineering for Early SIL Tailoring, Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn, 2018.
LibreCat: /record/20779
DOI: 10.17619/UNIPB/1-490

Threat Analysis in Practice - Systematically Deriving Security Requirements
M. Fockel, S. Merschjohann, M. Fazal-Baqaie, in: 19th International Conference on Product-Focused Software Process Improvement (PROFES 2018), Springer Nature Switzerland AG, 2018.
LibreCat: /record/20780
DOI: 10.1007/978-3-030-03673-7_25

Model-Driven STEP Application Protocol Extensions Combined with Feature Modeling Considering Geometrical Information
T. Koch, J. Holtmann, T. Lindemann, in: L.F. Pires, S. Hammoudi, B. Selic (Eds.), Revised Selected Papers of the 5th International Conference on Model-Driven Engineering and Software Development, Springer International Publishing, 2018, pp. 173–197.
LibreCat: /record/20782
DOI: 10.1007/978-3-319-94764-8_8