Krishnamurthy, R., Piskachev, G., &; Bodden, E. (2022). To what extent can we analyze Kotlin programs using existing Java taint analysis tools?

Piskachev, G., Dziwok, S., Koch, T., Merschjohann, S., &; Bodden, E. (2022). How far are German companies in improving security through static program analysis tools?

Holtmann, J., Steghöfer, J.-P., Rath, M., &; Schmelter, D. (2021). Cutting through the Jungle: Disambiguating Model-based Traceability Terminology (Extended Abstract). In A. Koziolek, I. Schaefer, &; C. Seidl (Eds.), Software Engineering 2021 (Vol. P-310, pp. 59–60). Remote / Braunschweig, Germany .https://doi.org/10.18420/SE2021_18 

Schubert, D., Eikerling, H., &; Holtmann, J. (2021). Application-Aware Intrusion Detection: A Systematic Literature Review, Implications for Automotive Systems, and Applicability of AutoML. Frontiers in Computer Science, 3.https://doi.org/10.3389/fcomp.2021.567873 

Dziwok, S., Koch, T., Merschjohann, S., Budweg, B., &; Leuer, S. (2021). AppSecure.nrw Software Security Study. ArXiv:2108.11752.

Kummita, S., Piskachev, G., Spath, J., &; Bodden, E. (2021). Qualitative and Quantitative Analysis of Callgraph Algorithms for Python. 2021 International Conference on Code Quality (ICCQ).https://doi.org/10.1109/iccq51190.2021.9392986 

Steghofer, J.-P., Koopmann, B., Steffen Becker, J., Stierand, I., Zeller, M., Bonner, M., Schmelter, D., &; Maro, S. (2021). The MobSTr Dataset – An Exemplar for Traceability and Model-based Safety Assessment. 2021 IEEE 29th International Requirements Engineering Conference (RE).https://doi.org/10.1109/re51729.2021.00062 

Piskachev, G., Krishnamurthy, R., &; Bodden, E. (2021). SecuCheck: Engineering configurable taint analysis for software developers. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM).

Holtmann, J., Steghofer, J.-P., Rath, M., &; Schmelter, D. (2020). Cutting through the Jungle: Disambiguating Model-based Traceability Terminology. In 2020 IEEE 28th International Requirements Engineering Conference (RE). IEEE.https://doi.org/10.1109/re48521.2020.00014 

Koch, T., Dziwok, S., Holtmann, J., &; Bodden, E. (2020). Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers. ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20).https://doi.org/10.1145/3365438.3410946 

Piskachev, G., Nguyen Quang Do, L., Johnson, O., &; Bodden, E. (2020). SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE).https://doi.org/10.1109/ase.2019.00110 

Piskachev, G., Petrasch, T., Späth, J., &; Bodden, E. (2020). AuthCheck: Program-State Analysis for Access-Control Vulnerabilities. In Lecture Notes in Computer Science.https://doi.org/10.1007/978-3-030-54997-8_34 

Koch, T., Meyer, M., Fazal-Baqaie, M., &; Runschke, H. (2020). Softwareentwicklung wie am Fliessband. In M. Felderer, W. Hasselbring, R. Rabiser, &; R. Jung (Eds.), Software Engineering 2020 (SE 2020). Gesellschaft für Informatik e.V.https://doi.org/10.18420/SE2020‑58 

Fazal-Baqaie, M., Strüwer, J.-N., Schmelter, D., &; Dziwok, S. (2019). Coaching on the Job bei Unternehmen des Maschinen- und Anlagenbaus - Wissenslücken schließen zur Weiterpflege modernisierter IT-Anwendungen. In M. Mikusz (Ed.), Projektmanagement und Vorgehensmodelle 2019 (PVM 2019). Lecture Notes in Informatics (LNI).

Fockel, M., Merschjohann, S., Fazal-Baqaie, M., Förder, T., Hausmann, S., &; Waldeck, B. (2019). Designing and Integrating IEC 62443 Compliant Threat Analysis. In European System, Software &; Service Process Improvement &; Innovation Conference (EuroSPI 2019) (Vol. 1060). Edinburgh, UK.https://doi.org/10.1007/978-3-030-28005-5_5 

Piskachev, G., Do, L. N. Q., &; Bodden, E. (2019). Codebase-adaptive detection of security-relevant methods. Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis.https://doi.org/10.1145/3293882.3330556 

Altemeier, K., Becker, M., Dziwok, S., Koch, T., &; Merschjohann, S. (2019). Was fehlt (bisher) um Apps sicher zu entwickeln? - Prozesse, Werkzeuge und Schulungen für sichere Apps by Design. In M. Mikusz (Ed.), Projektmanagement und Vorgehensmodelle 2019 (PVM 2019). Gesellschaft für Informatik e.V.

Fockel, M. (2018). Safety Requirements Engineering for Early SIL Tailoring. Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn.https://doi.org/10.17619/UNIPB/1-490 

Fockel, M., Merschjohann, S., &; Fazal-Baqaie, M. (2018). Threat Analysis in Practice - Systematically Deriving Security Requirements. In 19th International Conference on Product-Focused Software Process Improvement (PROFES 2018). Springer Nature Switzerland AG.https://doi.org/10.1007/978-3-030-03673-7_25 

Koch, T., Holtmann, J., &; Lindemann, T. (2018). Model-Driven STEP Application Protocol Extensions Combined with Feature Modeling Considering Geometrical Information. In L. F. Pires, S. Hammoudi, &; B. Selic (Eds.), Revised Selected Papers of the 5th International Conference on Model-Driven Engineering and Software Development (Vol. 880, pp. 173–197). Springer International Publishing.https://doi.org/10.1007/978-3-319-94764-8_8